[HDFS-4585] Webhdfs sometimes can't negotiate a SPNEGO token

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 2.0.0-alpha, 0.23.7, 3.0.0-alpha1
• Component/s: webhdfs
• Target Version/s: 2.0.4-alpha
• Assignee: Unassigned
• Reporter: Daryn Sharp
• Created: 11/Mar/13 20:24
• Updated: 12/May/16 18:13
• Resolved: 13/Mar/13 21:40

Description

I'm not sure if this is a curl problem or webhdfs problem, but webhdfs will reject some users because the Authorization header is too big. In the case below, the header contains 4041 bytes, whereas a keytab user is generating 1745 bytes. The failed user can use webhdfs via "hadoop fs", but not via curl.

curl -v --negotiate -u : 'http://host/webhdfs/v1/?op=GETDELEGATIONTOKEN'
> GET /webhdfs/v1/?op=GETDELEGATIONTOKEN HTTP/1.1
> Authorization: Negotiate <<4041 bytes>>
> User-Agent: curl/7.19.5
> Host: host
> Accept: */*
> 
< HTTP/1.1 413 FULL head
< Connection: close
< Server: Jetty(6.1.26)

Issue Links

• duplicates: HADOOP-8816 HTTP Error 413 full HEAD if using kerberos authentication