hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Alejandro Abdelnur (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-3460) HttpFS proxyuser validation with Kerberos ON uses full principal name
Date Thu, 24 May 2012 16:40:25 GMT

    [ https://issues.apache.org/jira/browse/HDFS-3460?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13282605#comment-13282605

Alejandro Abdelnur commented on HDFS-3460:

the failure seems unrelated and a one off, I cannot reproduce it in my environment, if I see
it again in Jenkins I'll open a JIRA as a flaky test to fix.

the patch does not have testcase that verifies the change, I've verified the change in a Kerberos
deployment using a service principal.
> HttpFS proxyuser validation with Kerberos ON uses full principal name
> ---------------------------------------------------------------------
>                 Key: HDFS-3460
>                 URL: https://issues.apache.org/jira/browse/HDFS-3460
>             Project: Hadoop HDFS
>          Issue Type: Bug
>    Affects Versions: 2.0.0-alpha
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>            Priority: Critical
>         Attachments: HDFS-3460.patch
> The HttpFSServer.getEffectiveUser() method uses the principal name for proxy user verification.
If the Kerberos is ON and the proxy user is a service principal (NAME/HOST) then the verification
fails, instead the short name (just NAME) should be used.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira


View raw message