Mailing-List: contact hdfs-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: hdfs-issues@hadoop.apache.org
Date: Fri, 17 Jan 2014 19:52:20 +0000 (UTC)
From: "Haohui Mai (JIRA)" <jira@apache.org>
To: hdfs-issues@hadoop.apache.org
Message-ID: <JIRA.12689518.1389977213995.26270.1389988340088@arcas>
In-Reply-To: <JIRA.12689518.1389977213995@arcas>
References: <JIRA.12689518.1389977213995@arcas>
Subject: [jira] [Commented] (HDFS-5796) The file system browser in the
 namenode UI requires SPNEGO.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/HDFS-5796?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13875192#comment-13875192 ] 

Haohui Mai commented on HDFS-5796:
----------------------------------

WebHDFS is designed to be a gateway for all third-party services where SPNEGO might not be available. 
In my opinion WebHDFS should support the same  authentication mechanisms as the one the web UI supports.

> The file system browser in the namenode UI requires SPNEGO.
> -----------------------------------------------------------
>
>                 Key: HDFS-5796
>                 URL: https://issues.apache.org/jira/browse/HDFS-5796
>             Project: Hadoop HDFS
>          Issue Type: Bug
>    Affects Versions: 2.4.0
>            Reporter: Kihwal Lee
>            Priority: Critical
>
> After HDFS-5382, the browser makes webhdfs REST calls directly, requiring SPNEGO to work between user's browser and namenode.  This won't work if the cluster's security infrastructure is isolated from the regular network.  Moreover, SPNEGO is not supposed to be required for user-facing web pages.


--
This message was sent by Atlassian JIRA
(v6.1.5#6160)