[AMBARI-19389] Authentication negotiation HTTP response should be sent when Kerberos authentication is enabled

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.5.0
• Fix Version/s: 2.5.0
• Component/s: ambari-server
• Labels: authentication kerberos security
• Epic Link: Ambari authentication with Kerberos token
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 05/Jan/17 16:37
• Updated: 07/Jan/17 03:39
• Resolved: 07/Jan/17 01:47

Description

Authentication negotiation HTTP response should be automatically sent when needed when Kerberos authentication is enabled.

The expected HTTP response during authentication failure when Kerberos authentication into Ambari is enabled is as follows:

HTTP/1.1 401 Authentication requested
WWW-Authenticate: Negotiate

When Kerberos authentication into Ambari is not enabled the expected HTTP response for an authentication failure is:

HTTP/1.1 403 Missing authentication token

Issue Links

• links to: ReviewBoard