hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Eli Collins (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-3983) Hftp should support both SPNEGO and KSSL
Date Thu, 27 Sep 2012 20:59:07 GMT

    [ https://issues.apache.org/jira/browse/HDFS-3983?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13465083#comment-13465083
] 

Eli Collins commented on HDFS-3983:
-----------------------------------

Yes, it's already broken in trunk. HDFS-3699 tracks fixing this, and once that's in we'll
still need to use the https port right? I'm removing the use of the https port entirely here,
which we won't want to do. How about a smaller fix in the meantime that just defaults to the
http port and we can make it use the https port per HDFS-3461 once HDFS-3699 is in?
                
> Hftp should support both SPNEGO and KSSL
> ----------------------------------------
>
>                 Key: HDFS-3983
>                 URL: https://issues.apache.org/jira/browse/HDFS-3983
>             Project: Hadoop HDFS
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 2.0.0-alpha
>            Reporter: Eli Collins
>            Assignee: Eli Collins
>         Attachments: hdfs-3983.txt, hdfs-3983.txt
>
>
> Hftp currently doesn't work against a secure cluster unless you configure {{dfs.https.port}}
to be the http port, otherwise the client can't fetch tokens:
> {noformat}
> $ hadoop fs -ls hftp://c1225.hal.cloudera.com:50070/
> 12/09/26 18:02:00 INFO fs.FileSystem: Couldn't get a delegation token from http://c1225.hal.cloudera.com:50470
using http.
> ls: Security enabled but user not authenticated by filter
> {noformat}
> This is due to Hftp still using the https port. Post HDFS-2617 it should use the regular
http port. Hsftp should still use the secure port, however now that we have HADOOP-8581 it's
worth considering removing Hsftp entirely. I'll start a separate thread about that.  

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message