Return-Path: X-Original-To: apmail-hadoop-hdfs-issues-archive@minotaur.apache.org Delivered-To: apmail-hadoop-hdfs-issues-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 42F56DC05 for ; Wed, 18 Jul 2012 05:22:37 +0000 (UTC) Received: (qmail 85181 invoked by uid 500); 18 Jul 2012 05:22:36 -0000 Delivered-To: apmail-hadoop-hdfs-issues-archive@hadoop.apache.org Received: (qmail 84918 invoked by uid 500); 18 Jul 2012 05:22:35 -0000 Mailing-List: contact hdfs-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: hdfs-issues@hadoop.apache.org Delivered-To: mailing list hdfs-issues@hadoop.apache.org Received: (qmail 84844 invoked by uid 99); 18 Jul 2012 05:22:34 -0000 Received: from issues-vm.apache.org (HELO issues-vm) (140.211.11.160) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 18 Jul 2012 05:22:34 +0000 Received: from isssues-vm.apache.org (localhost [127.0.0.1]) by issues-vm (Postfix) with ESMTP id 92595140541 for ; Wed, 18 Jul 2012 05:22:34 +0000 (UTC) Date: Wed, 18 Jul 2012 05:22:34 +0000 (UTC) From: "Eli Collins (JIRA)" To: hdfs-issues@hadoop.apache.org Message-ID: <502751684.67812.1342588954601.JavaMail.jiratomcat@issues-vm> In-Reply-To: <246559683.37213.1342032694691.JavaMail.jiratomcat@issues-vm> Subject: [jira] [Updated] (HDFS-3639) JspHelper#getUGI should always verify the token if security is enabled MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HDFS-3639?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eli Collins updated HDFS-3639: ------------------------------ Target Version/s: 1.2.0, 2.2.0-alpha Fix Version/s: (was: 1.2.0) (was: 2.1.0-alpha) > JspHelper#getUGI should always verify the token if security is enabled > ---------------------------------------------------------------------- > > Key: HDFS-3639 > URL: https://issues.apache.org/jira/browse/HDFS-3639 > Project: Hadoop HDFS > Issue Type: Bug > Components: security > Affects Versions: 1.0.0, 2.0.0-alpha > Reporter: Eli Collins > Assignee: Eli Collins > Priority: Minor > Attachments: hdfs-3639-b1.txt, hdfs-3639.txt > > > JspHelper#getUGI on verifies the given token if the context and nn are set (added in HDFS-2416). We should unconditionally verifyToken the token, ie a bug where "name.node" is not set in the context object should not result in not verifying the token. In practice this shouldn't be an issue as per HDFS-3434 the context and NN should never be null. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira