knox-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Larry McCay (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (KNOX-303) Handle Invalid SLA ACL Configuration
Date Fri, 07 Mar 2014 21:44:43 GMT

    [ https://issues.apache.org/jira/browse/KNOX-303?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13924376#comment-13924376
] 

Larry McCay commented on KNOX-303:
----------------------------------

Provider parameters aren't evaluated until runtime therefore we can't halt deployment which
would be ideal.

Invalid configuration will result in the AclParser throwing an InvalidACLException and thus
result in an HTTP status code of 500 with appropriate error message.

> Handle Invalid SLA ACL Configuration
> ------------------------------------
>
>                 Key: KNOX-303
>                 URL: https://issues.apache.org/jira/browse/KNOX-303
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>            Reporter: Larry McCay
>
> 1. Indexoutof bounds 
> when ACL value is
> <param>
> <name>webhdfs.acl</name>
> <value>guest</value>
> </param>
> at org.apache.hadoop.gateway.filter.AclsAuthorizationFilter.parseGroupAcls(AclsAuthorizationFilter.java:120)
> at org.apache.hadoop.gateway.filter.AclsAuthorizationFilter.parseAcls(AclsAuthorizationFilter.java:98)
> at org.apache.hadoop.gateway.filter.AclsAuthorizationFilter.init(AclsAuthorizationFilter.java:77)
> at org.apache.hadoop.gateway.GatewayFilter$Holder.getInstance(GatewayFilter.java:341)
> at org.apache.hadoop.gateway.GatewayFilter$Holder.doFilter(GatewayFilter.java:311)
> at org.apache.hadoop.gateway.GatewayFilter$Chain.doFilter(GatewayFilter.java:212)
> at org.apache.hadoop.gateway.filter.security.AbstractIdentityAssertionFilter.doFilterInternal(AbstractIdentityAssertionFilter.java:209)
> at org.apache.hadoop.gateway.filter.security.AbstractIdentityAssertionFilter.continueChainAsPrincipal(AbstractIdentityAssertionFilter.java:157)
> at org.apache.hadoop.gateway.identityasserter.filter.IdentityAsserterFilter.doFilter(IdentityAsserterFilter.java:55)
> 1. Leads to Null pointer when value =
> <param>
> <name>webhdfs.acl</name>
> <value>guest;;</value>
> </param>
> Server Error</pre></p><h3>Caused by:</h3><pre>org.apache.shiro.subject.ExecutionException:
java.security.PrivilegedActionException: javax.servlet.ServletException: java.lang.NullPointerException
> at org.apache.shiro.subject.support.DelegatingSubject.execute(DelegatingSubject.java:385)
> at org.apache.hadoop.gateway.filter.ShiroSubjectIdentityAdapter.doFilter(ShiroSubjectIdentityAdapter.java:74)
> at org.apache.hadoop.gateway.GatewayFilter$Holder.doFilter(GatewayFilter.java:311)
> at org.apache.hadoop.gateway.GatewayFilter$Chain.doFilter(GatewayFilter.java:212)
> at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:61)
> at org.apache.shiro.web.servlet.AdviceFilter.executeChain(AdviceFilter.java:108)



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message