[FALCON-748] Falcon throws '413 Full Head' error message when kerberos is enabled with AD

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 0.5
• Fix Version/s: 0.6
• Labels: security
• Assignee: Balu Vellanki
• Reporter: Venkatesh Seetharam
• Created: 19/Sep/14 16:47
• Updated: 02/Oct/14 00:52
• Resolved: 02/Oct/14 00:52

Description

PROBLEM: Customer has Kerberos setup with AD, and when using ambari-qa or other users of HDP, we are able to get the required details but using the AD users receiving the exception '413, message: FULL head'

IMPACT: This makes falcon unusable for replication as the AD users cannot access falcon

STEPS TO REPRODUCE:
1. Set up AD user and Kerberos pointing to AD users
2. Enable Kerberos for the HDP cluster.
3. Try to run the falcon admin -version command, you would see the issue.

ACTUAL BEHAVIOR: Receiving '413, message: FULL head' when trying to access falcon.
EXPECTED BEHAVIOR: The exception should not occur.

1. The reason for this exception is because of the header buffer size being limited in our embedded Jetty for Falcon.
2. Found a blog which states what needs to be set (http://blog.richeton.com/2010/03/11/set-jetty-buffer-size-maven/)