[HADOOP-10193] hadoop-auth's PseudoAuthenticationHandler can consume getInputStream

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 2.3.0
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Gregory Chanan
• Reporter: Gregory Chanan
• Created: 28/Dec/13 01:14
• Updated: 07/Mar/14 02:25
• Resolved: 06/Jan/14 18:20

Description

I'm trying to use the AuthenticationFilter in front of Apache Solr. The issue I'm running into is that the PseudoAuthenticationHandler calls ServletRequest.getParameter which affects future calls to ServletRequest.getInputStream. I.e. from the javadoc:

If the parameter data was sent in the request body, such as occurs with an HTTP POST request, then reading the body directly via getInputStream() or getReader() can interfere with the execution of this method. 

Solr calls getInputStream after the filter and errors result.

Issue Links

• is related to: HIVE-6576 sending user.name as a form parameter in POST doesn't work post HADOOP-10193