[HDFS-2368] defaults created for web keytab and principal, these properties should not have defaults

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.20.205.0
• Fix Version/s: 0.20.205.0, 0.23.0
• Hadoop Flags: Reviewed
• Assignee: Tsz-wo Sze
• Reporter: Arpit Gupta
• Created: 26/Sep/11 23:53
• Updated: 16/Mar/15 18:01
• Resolved: 28/Sep/11 05:01

Description

the following defaults are set in hdfs-defaults.xml

<property>
<name>dfs.web.authentication.kerberos.principal</name>
<value>HTTP/${dfs.web.hostname}@${kerberos.realm}</value>
<description>
The HTTP Kerberos principal used by Hadoop-Auth in the HTTP endpoint.

The HTTP Kerberos principal MUST start with 'HTTP/' per Kerberos
HTTP SPENGO specification.
</description>
</property>

<property>
<name>dfs.web.authentication.kerberos.keytab</name>
<value>${user.home}/dfs.web.keytab</value>
<description>
The Kerberos keytab file with the credentials for the
HTTP Kerberos principal used by Hadoop-Auth in the HTTP endpoint.
</description>
</property>

These properties should not have defaults

Issue Links

• is related to: HDFS-2316 [umbrella] WebHDFS: a complete FileSystem implementation for accessing HDFS over HTTP
• is related to: HADOOP-7688 When a servlet filter throws an exception in init(..), the Jetty server failed silently.