Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-3639

JspHelper#getUGI should always verify the token if security is enabled

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Reopened
    • Minor
    • Resolution: Unresolved
    • 1.0.0, 2.0.0-alpha
    • None
    • security
    • None

    Description

      JspHelper#getUGI on verifies the given token if the context and nn are set (added in HDFS-2416). We should unconditionally verifyToken the token, ie a bug where "name.node" is not set in the context object should not result in not verifying the token. In practice this shouldn't be an issue as per HDFS-3434 the context and NN should never be null.

      Attachments

        1. hdfs-3639-b1.txt
          1 kB
          Eli Collins
        2. hdfs-3639.txt
          2 kB
          Eli Collins

        Activity

          People

            Unassigned Unassigned
            eli Eli Collins
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

              Created:
              Updated: