hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Benoy Antony (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-5661) Browsing FileSystem via web ui, should use datanode's hostname instead of ip address
Date Fri, 13 Dec 2013 22:40:07 GMT

    [ https://issues.apache.org/jira/browse/HDFS-5661?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13848011#comment-13848011
] 

Benoy Antony commented on HDFS-5661:
------------------------------------

Only Namenode will authenticate a client using HDFS Delegation Token ( which is issued by
the Namenode.)
The client still needs to authenticate to the datanode and cannot use the Delegation Token
for this purpose.
The configuration related to the cookie domain is hadoop.http.authentication.cookie.domain
and more details on the authentication of http consoles is here  : https://hadoop.apache.org/docs/current2/hadoop-project-dist/hadoop-common/HttpAuthentication.html

When browsing the filesystem via original webui, the DelegationToken is used by the DataNode
to contact the Namenode .


> Browsing FileSystem via web ui, should use datanode's hostname instead of ip address
> ------------------------------------------------------------------------------------
>
>                 Key: HDFS-5661
>                 URL: https://issues.apache.org/jira/browse/HDFS-5661
>             Project: Hadoop HDFS
>          Issue Type: Bug
>    Affects Versions: 2.2.0
>            Reporter: Benoy Antony
>            Assignee: Benoy Antony
>         Attachments: HDFS-5661.patch
>
>
> If authentication is enabled on the web ui, then a cookie is used to keep track of the
authentication information. There is normally a domain associated with the cookie. Since ip
address doesn't have any domain , the cookie will not be sent by the browser while making
http calls with ip address as the destination server.
> This will break browsing files system via web ui , if authentication is enabled.
> Browsing FileSystem via web ui, should use datanode's hostname instead of ip address.




--
This message was sent by Atlassian JIRA
(v6.1.4#6159)

Mime
View raw message