hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Allen Wittenauer (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (HDFS-5796) The file system browser in the namenode UI requires SPNEGO.
Date Tue, 10 Mar 2015 23:39:42 GMT

    [ https://issues.apache.org/jira/browse/HDFS-5796?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14355950#comment-14355950
] 

Allen Wittenauer edited comment on HDFS-5796 at 3/10/15 11:39 PM:
------------------------------------------------------------------

I'm (obviously) +1.  This fixes the issues that we saw when using AltKerberos and suspect
it will fix other people who are seeing failures when using either AltKerberos-based or an
alternative handler.

I'll wait until Jenkins passes (well, you know how that goes...) and a day or so before committing
this unless anyone has any objections.


was (Author: aw):
I'm (obviously) +1.  This fixes the issues that we saw when using AltKerberos and suspect
it will fix other people who are seeing failures when using either AltKerberos-based or an
alternative handler.

> The file system browser in the namenode UI requires SPNEGO.
> -----------------------------------------------------------
>
>                 Key: HDFS-5796
>                 URL: https://issues.apache.org/jira/browse/HDFS-5796
>             Project: Hadoop HDFS
>          Issue Type: Bug
>    Affects Versions: 2.5.0
>            Reporter: Kihwal Lee
>            Assignee: Ryan Sasson
>            Priority: Blocker
>         Attachments: HDFS-5796.1.patch, HDFS-5796.1.patch, HDFS-5796.2.patch, HDFS-5796.3.patch,
HDFS-5796.3.patch, HDFS-5796.4.patch
>
>
> After HDFS-5382, the browser makes webhdfs REST calls directly, requiring SPNEGO to work
between user's browser and namenode.  This won't work if the cluster's security infrastructure
is isolated from the regular network.  Moreover, SPNEGO is not supposed to be required for
user-facing web pages.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message