[HADOOP-10670] Allow AuthenticationFilters to load secret from signature secret files

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 2.7.0
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Kai Zheng
• Reporter: Kai Zheng
• Created: 09/Jun/14 05:28
• Updated: 18/Jun/15 22:56
• Resolved: 25/Mar/15 18:13

Description

In Hadoop web console, by using AuthenticationFilterInitializer, it's allowed to configure AuthenticationFilter for the required signature secret by specifying signature.secret.file property. This improvement would also allow this when AuthenticationFilterInitializer isn't used in situations like webhdfs.

Issue Links

• breaks: HADOOP-11754 RM fails to start in non-secure mode due to authentication filter failure
• is related to: HADOOP-11763 RM in insecure model get start failure after HADOOP-10670.
• is related to: HADOOP-11748 The secrets of auth cookies should not be specified in configuration in clear text
• relates to: HADOOP-11567 Refresh HTTP Authentication secret without restarting the server