hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Haohui Mai (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-5660) When SSL is enabled , the Namenode WEBUI redirects to Infosecport, which could be 0
Date Fri, 13 Dec 2013 02:17:07 GMT

    [ https://issues.apache.org/jira/browse/HDFS-5660?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13847060#comment-13847060
] 

Haohui Mai commented on HDFS-5660:
----------------------------------

The bug no longer exists after 2.2.

bq. All this patch does is to maintain backward compatibility so that the addition of infosecureport
does not break a feature which was working before.

Based on my understanding enabling hadoop.ssl.enabled is broken in 2.2 in a number of ways
(see https://issues.apache.org/jira/browse/HADOOP-8581?focusedCommentId=13784332&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-13784332
for details). HDFS-5305 and related jiras tracks the effort of fixing this in HDFS. For example,
HDFS-5536 and HDFS-5629 allow you to configure dfs.http.policy to enable HTTP or HTTPS servers
independently.

I would recommend that you use dfs.https.enable instead of hadoop.ssl.enabled in 2.2, and
move towards dfs.http.policy in newer versions.

> When SSL is enabled , the Namenode WEBUI redirects to Infosecport, which could be 0
> -----------------------------------------------------------------------------------
>
>                 Key: HDFS-5660
>                 URL: https://issues.apache.org/jira/browse/HDFS-5660
>             Project: Hadoop HDFS
>          Issue Type: Bug
>    Affects Versions: 2.2.0
>            Reporter: Benoy Antony
>            Assignee: Benoy Antony
>         Attachments: HDFS-5660.patch
>
>
> When SSL is enabled by setting "hadoop.ssl.enabled", SSL will be enabled on the regular
port (infoport) on Datanode. (case 1)
> When SSL on HDFS is enabled by setting "dfs.https.enable", SSL will be enabled on a separate
port (infoSecurePort)  on Datanode.  (case 2)
> if SSL is enabled , the Namenode always redirects to infoSecurePort. "infoSecurePort"
will be 0 in case 1 above.
> This breaks the file browsing via web.



--
This message was sent by Atlassian JIRA
(v6.1.4#6159)

Mime
View raw message