[HADOOP-10671] Unify and simplify common configurations for authentication filters between web console and web hdfs

• Type: Improvement
• Status: Patch Available
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Labels: BB2015-05-TBR
• Assignee: Kai Zheng
• Reporter: Kai Zheng
• Created: 09/Jun/14 05:58
• Updated: 06/May/15 03:27

Description

Currently it's not able to single sign on between hadoop web console and webhdfs since they don't share common configurations as required to, such as signature secret to sign authenticaton token, and domain cookie etc. This improvement would allow sso between the two, and also simplify the configuration by removing the duplicate effort for the two parts.

The sso makes sense because in current web console, it integrates webhdfs and we should avoid redundant sign on in different mechanisms. This is necessary when a certain authentication mechanism other than SPNEGO is desired across web console and webhdfs.

Issue Links

• is related to: HADOOP-10679 Authorize webui access using ServiceAuthorizationManager
• relates to: HADOOP-10709 Reuse Filters across web apps