hive-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jimmy Xiang (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HIVE-14984) Hive-WebUI access results in Request is a replay (34) attack
Date Thu, 20 Oct 2016 20:57:58 GMT

    [ https://issues.apache.org/jira/browse/HIVE-14984?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15592987#comment-15592987
] 

Jimmy Xiang commented on HIVE-14984:
------------------------------------

Good. Thanks.

> Hive-WebUI access results in Request is a replay (34) attack
> ------------------------------------------------------------
>
>                 Key: HIVE-14984
>                 URL: https://issues.apache.org/jira/browse/HIVE-14984
>             Project: Hive
>          Issue Type: Bug
>          Components: HiveServer2
>    Affects Versions: 1.2.0
>            Reporter: Venkat Sambath
>            Assignee: Barna Zsombor Klara
>         Attachments: HIVE-14984.patch
>
>
> When trying to access kerberized webui of HS2, The following error is received
> GSSException: Failure unspecified at GSS-API level (Mechanism level: Request is a replay
(34))
> While this is not happening for RM webui (checked if kerberos webui is enabled)
> To reproduce the issue 
> Try running
> curl --negotiate -u : -b ~/cookiejar.txt -c ~/cookiejar.txt http://<hostname>:10002/
> from any cluster nodes
> or 
> Try accessing the URL from a VM with windows machine and firefox browser to replicate
the issue
> The following workaround helped, but need a permanent solution for the bug
> Workaround:
> =========
> First access the index.html directly and then actual URL of webui
> curl --negotiate -u : -b ~/cookiejar.txt -c ~/cookiejar.txt http://<hostname>:10002/index.html
> curl --negotiate -u : -b ~/cookiejar.txt -c ~/cookiejar.txt http://<hostname>:10002
> In browser:
> First access
> http://<hostname>:10002/index.html
> then
> http://<hostname>:10002



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message