Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-19389

Authentication negotiation HTTP response should be sent when Kerberos authentication is enabled

Details

    Description

      Authentication negotiation HTTP response should be automatically sent when needed when Kerberos authentication is enabled.

      The expected HTTP response during authentication failure when Kerberos authentication into Ambari is enabled is as follows:

      HTTP/1.1 401 Authentication requested
      WWW-Authenticate: Negotiate
      

      When Kerberos authentication into Ambari is not enabled the expected HTTP response for an authentication failure is:

      HTTP/1.1 403 Missing authentication token
      

      Attachments

        1. AMBARI-19389_trunk_02.patch
          7 kB
          Robert Levas
        2. AMBARI-19389_trunk_01.patch
          6 kB
          Robert Levas
        3. AMBARI-19389_branch-2.5_02.patch
          7 kB
          Robert Levas
        4. AMBARI-19389_branch-2.5_01.patch
          7 kB
          Robert Levas

        Issue Links

          Activity

            hadoopqa Hadoop QA added a comment -

            -1 overall. Here are the results of testing the latest attachment
            http://issues.apache.org/jira/secure/attachment/12845858/AMBARI-19389_trunk_01.patch
            against trunk revision .

            +1 @author. The patch does not contain any @author tags.

            +1 tests included. The patch appears to include 1 new or modified test files.

            -1 javac. The patch appears to cause the build to fail.

            Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/9929//console

            This message is automatically generated.

            hadoopqa Hadoop QA added a comment - -1 overall . Here are the results of testing the latest attachment http://issues.apache.org/jira/secure/attachment/12845858/AMBARI-19389_trunk_01.patch against trunk revision . +1 @author . The patch does not contain any @author tags. +1 tests included . The patch appears to include 1 new or modified test files. -1 javac . The patch appears to cause the build to fail. Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/9929//console This message is automatically generated.
            hudson Hudson added a comment -

            FAILURE: Integrated in Jenkins build Ambari-trunk-Commit #6381 (See https://builds.apache.org/job/Ambari-trunk-Commit/6381/)
            AMBARI-19389. Authentication negotiation HTTP response should be sent (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=fc586a87aa466c2fda12ef36b0ddee1e63b9e174)

            • (edit) ambari-server/src/main/resources/webapp/WEB-INF/spring-security.xml
            • (add) ambari-server/src/test/java/org/apache/ambari/server/security/AmbariEntryPointTest.java
            • (edit) ambari-server/src/main/java/org/apache/ambari/server/security/AmbariEntryPoint.java
            hudson Hudson added a comment - FAILURE: Integrated in Jenkins build Ambari-trunk-Commit #6381 (See https://builds.apache.org/job/Ambari-trunk-Commit/6381/ ) AMBARI-19389 . Authentication negotiation HTTP response should be sent (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=fc586a87aa466c2fda12ef36b0ddee1e63b9e174 ) (edit) ambari-server/src/main/resources/webapp/WEB-INF/spring-security.xml (add) ambari-server/src/test/java/org/apache/ambari/server/security/AmbariEntryPointTest.java (edit) ambari-server/src/main/java/org/apache/ambari/server/security/AmbariEntryPoint.java
            hudson Hudson added a comment -

            FAILURE: Integrated in Jenkins build Ambari-branch-2.5 #664 (See https://builds.apache.org/job/Ambari-branch-2.5/664/)
            AMBARI-19389. Authentication negotiation HTTP response should be sent (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=21810ccbbd1e3a1263cd4758725e17f66eeae5b8)

            • (add) ambari-server/src/test/java/org/apache/ambari/server/security/AmbariEntryPointTest.java
            • (edit) ambari-server/src/main/java/org/apache/ambari/server/security/AmbariEntryPoint.java
            • (edit) ambari-server/src/main/resources/webapp/WEB-INF/spring-security.xml
            hudson Hudson added a comment - FAILURE: Integrated in Jenkins build Ambari-branch-2.5 #664 (See https://builds.apache.org/job/Ambari-branch-2.5/664/ ) AMBARI-19389 . Authentication negotiation HTTP response should be sent (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=21810ccbbd1e3a1263cd4758725e17f66eeae5b8 ) (add) ambari-server/src/test/java/org/apache/ambari/server/security/AmbariEntryPointTest.java (edit) ambari-server/src/main/java/org/apache/ambari/server/security/AmbariEntryPoint.java (edit) ambari-server/src/main/resources/webapp/WEB-INF/spring-security.xml
            u39kun Yusaku Sako added a comment -

            Reverted from trunk and branch-2.5 due to introduction of a rat check failure.

            u39kun Yusaku Sako added a comment - Reverted from trunk and branch-2.5 due to introduction of a rat check failure.
            u39kun Yusaku Sako added a comment - - edited

            Unapproved licenses:

            ambari/ambari-server/src/test/java/org/apache/ambari/server/security/AmbariEntryPointTest.java

            u39kun Yusaku Sako added a comment - - edited Unapproved licenses: ambari/ambari-server/src/test/java/org/apache/ambari/server/security/AmbariEntryPointTest.java
            rlevas Robert Levas added a comment -

            Committed to trunk

            commit fc586a87aa466c2fda12ef36b0ddee1e63b9e174
            Author: Robert Levas <rlevas@hortonworks.com>
            Date:   Fri Jan 6 16:25:19 2017 -0500
            

            Committed to branch-2.5

            commit 21810ccbbd1e3a1263cd4758725e17f66eeae5b8
            Author: Robert Levas <rlevas@hortonworks.com>
            Date:   Fri Jan 6 18:46:38 2017 -0500
            
            rlevas Robert Levas added a comment - Committed to trunk commit fc586a87aa466c2fda12ef36b0ddee1e63b9e174 Author: Robert Levas <rlevas@hortonworks.com> Date: Fri Jan 6 16:25:19 2017 -0500 Committed to branch-2.5 commit 21810ccbbd1e3a1263cd4758725e17f66eeae5b8 Author: Robert Levas <rlevas@hortonworks.com> Date: Fri Jan 6 18:46:38 2017 -0500
            rlevas Robert Levas added a comment -

            Reopened to fix rat check errors.

            rlevas Robert Levas added a comment - Reopened to fix rat check errors.
            rlevas Robert Levas added a comment -

            Committed to trunk

            commit 03cd5cedb76a49ebfe5c6e161080c48eeeb0efdc
            Author: Robert Levas <rlevas@hortonworks.com>
            Date:   Fri Jan 6 20:43:44 2017 -0500
            

            Committed to branch-2.5

            commit d346558c129684ca06e9dc84d666321236c51840
            Author: Robert Levas <rlevas@hortonworks.com>
            Date:   Fri Jan 6 20:46:28 2017 -0500
            
            rlevas Robert Levas added a comment - Committed to trunk commit 03cd5cedb76a49ebfe5c6e161080c48eeeb0efdc Author: Robert Levas <rlevas@hortonworks.com> Date: Fri Jan 6 20:43:44 2017 -0500 Committed to branch-2.5 commit d346558c129684ca06e9dc84d666321236c51840 Author: Robert Levas <rlevas@hortonworks.com> Date: Fri Jan 6 20:46:28 2017 -0500
            hudson Hudson added a comment -

            SUCCESS: Integrated in Jenkins build Ambari-branch-2.5 #665 (See https://builds.apache.org/job/Ambari-branch-2.5/665/)
            Revert "AMBARI-19389. Authentication negotiation HTTP response should be (yusaku: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=00a9399dc0f0eb09d805a455f10227010a1a5e3d)

            • (edit) ambari-server/src/main/java/org/apache/ambari/server/security/AmbariEntryPoint.java
            • (edit) ambari-server/src/main/resources/webapp/WEB-INF/spring-security.xml
            • (delete) ambari-server/src/test/java/org/apache/ambari/server/security/AmbariEntryPointTest.java
              AMBARI-19389. Authentication negotiation HTTP response should be sent (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=d346558c129684ca06e9dc84d666321236c51840)
            • (edit) ambari-server/src/main/java/org/apache/ambari/server/security/AmbariEntryPoint.java
            • (edit) ambari-server/src/main/resources/webapp/WEB-INF/spring-security.xml
            • (add) ambari-server/src/test/java/org/apache/ambari/server/security/AmbariEntryPointTest.java
            hudson Hudson added a comment - SUCCESS: Integrated in Jenkins build Ambari-branch-2.5 #665 (See https://builds.apache.org/job/Ambari-branch-2.5/665/ ) Revert " AMBARI-19389 . Authentication negotiation HTTP response should be (yusaku: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=00a9399dc0f0eb09d805a455f10227010a1a5e3d ) (edit) ambari-server/src/main/java/org/apache/ambari/server/security/AmbariEntryPoint.java (edit) ambari-server/src/main/resources/webapp/WEB-INF/spring-security.xml (delete) ambari-server/src/test/java/org/apache/ambari/server/security/AmbariEntryPointTest.java AMBARI-19389 . Authentication negotiation HTTP response should be sent (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=d346558c129684ca06e9dc84d666321236c51840 ) (edit) ambari-server/src/main/java/org/apache/ambari/server/security/AmbariEntryPoint.java (edit) ambari-server/src/main/resources/webapp/WEB-INF/spring-security.xml (add) ambari-server/src/test/java/org/apache/ambari/server/security/AmbariEntryPointTest.java
            hudson Hudson added a comment -

            FAILURE: Integrated in Jenkins build Ambari-trunk-Commit #6383 (See https://builds.apache.org/job/Ambari-trunk-Commit/6383/)
            Revert "AMBARI-19389. Authentication negotiation HTTP response should be (yusaku: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=fbcad4fb4e22e88ff8e1487ea385911bfe41ad09)

            • (edit) ambari-server/src/main/resources/webapp/WEB-INF/spring-security.xml
            • (edit) ambari-server/src/main/java/org/apache/ambari/server/security/AmbariEntryPoint.java
            • (delete) ambari-server/src/test/java/org/apache/ambari/server/security/AmbariEntryPointTest.java
              AMBARI-19389. Authentication negotiation HTTP response should be sent (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=03cd5cedb76a49ebfe5c6e161080c48eeeb0efdc)
            • (add) ambari-server/src/test/java/org/apache/ambari/server/security/AmbariEntryPointTest.java
            • (edit) ambari-server/src/main/java/org/apache/ambari/server/security/AmbariEntryPoint.java
            • (edit) ambari-server/src/main/resources/webapp/WEB-INF/spring-security.xml
            hudson Hudson added a comment - FAILURE: Integrated in Jenkins build Ambari-trunk-Commit #6383 (See https://builds.apache.org/job/Ambari-trunk-Commit/6383/ ) Revert " AMBARI-19389 . Authentication negotiation HTTP response should be (yusaku: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=fbcad4fb4e22e88ff8e1487ea385911bfe41ad09 ) (edit) ambari-server/src/main/resources/webapp/WEB-INF/spring-security.xml (edit) ambari-server/src/main/java/org/apache/ambari/server/security/AmbariEntryPoint.java (delete) ambari-server/src/test/java/org/apache/ambari/server/security/AmbariEntryPointTest.java AMBARI-19389 . Authentication negotiation HTTP response should be sent (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=03cd5cedb76a49ebfe5c6e161080c48eeeb0efdc ) (add) ambari-server/src/test/java/org/apache/ambari/server/security/AmbariEntryPointTest.java (edit) ambari-server/src/main/java/org/apache/ambari/server/security/AmbariEntryPoint.java (edit) ambari-server/src/main/resources/webapp/WEB-INF/spring-security.xml

            People

              rlevas Robert Levas
              rlevas Robert Levas
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: