Mailing-List: contact hdfs-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: hdfs-issues@hadoop.apache.org
Message-ID: <1383376737.24851267593207337.JavaMail.jira@brutus.apache.org>
Date: Wed, 3 Mar 2010 05:13:27 +0000 (UTC)
From: "Jakob Homan (JIRA)" <jira@apache.org>
To: hdfs-issues@hadoop.apache.org
Subject: [jira] Created: (HDFS-1018) JspHeler.getUGI assumes user is
 KerbSSL'ed authed, which may not be true
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

JspHeler.getUGI assumes user is KerbSSL'ed authed, which may not be true
------------------------------------------------------------------------

                 Key: HDFS-1018
                 URL: https://issues.apache.org/jira/browse/HDFS-1018
             Project: Hadoop HDFS
          Issue Type: Bug
            Reporter: Jakob Homan


As identified in HDFS-1017, the UGI helper function defaults to Kerberos SSL as the final possible authentication method for an authenticated user.  However, this may not be true if another filter is used to authenticate users, which is provided for.  We should create another value to signify if users were actually Kerbed auth or done another way.  Kerberos auth can be verified by checking for instanceof KerberosPrincipal in the helper.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.