hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-8572) DN always uses HTTP/localhost@REALM principals in SPNEGO
Date Sat, 13 Jun 2015 15:32:03 GMT

    [ https://issues.apache.org/jira/browse/HDFS-8572?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14584660#comment-14584660
] 

Hudson commented on HDFS-8572:
------------------------------

FAILURE: Integrated in Hadoop-Mapreduce-trunk #2173 (See [https://builds.apache.org/job/Hadoop-Mapreduce-trunk/2173/])
HDFS-8572. DN always uses HTTP/localhost@REALM principals in SPNEGO. Contributed by Haohui
Mai. (wheat9: rev eef7b50e23f9960e4bb61d9db6754a2300bc06eb)
* hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt
* hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/server/datanode/web/DatanodeHttpServer.java
* hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/server/datanode/DataNode.java


> DN always uses HTTP/localhost@REALM principals in SPNEGO
> --------------------------------------------------------
>
>                 Key: HDFS-8572
>                 URL: https://issues.apache.org/jira/browse/HDFS-8572
>             Project: Hadoop HDFS
>          Issue Type: Bug
>            Reporter: Haohui Mai
>            Assignee: Haohui Mai
>            Priority: Blocker
>             Fix For: 2.7.1
>
>         Attachments: HDFS-8572.000.patch, HDFS-8572.001.patch, HDFS-8572.002.patch
>
>
> In HDFS-7279 the Netty server in DN proxies all servlet requests to the local Jetty instance.
> The Jetty server is configured incorrectly so that it always uses {{HTTP/locahost@REALM}}
to authenticate spnego requests. As a result, servlets like JMX are no longer accessible in
secure deployments.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message