[MESOS-5343] Behavior of custom HTTP authenticators with disabled HTTP authentication is inconsistent between master and agent

• Type: Bug
• Status: Accepted
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 1.0.0
• Labels: mesosphere security
• Story Points: 3
• Assignee: Unassigned
• Reporter: Benjamin Bannier
• Created: 09/May/16 11:56
• Updated: 12/Jan/18 09:20

Description

When setting a custom authenticator with http_authenticators and also specifying authenticate_http=false currently agents refuse to start with

A custom HTTP authenticator was specified with the '--http_authenticators' flag, but HTTP authentication was not enabled via '--authenticate_http'

Masters on the other hand accept this setting.

Having differing behavior between master and agents is confusing, and we should decide on whether we want to accept these settings or not, and make the implementations consistent.