[HADOOP-10391] HADOOP-10211 change for comma-separated list of QOP values broke backwards-compatibility with existing configs.

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Won't Fix
• Affects Version/s: 2.4.0
• Component/s: security
• Target Version/s: 2.4.0
• Assignee: Benoy Antony
• Reporter: Chris Nauroth
• Created: 06/Mar/14 23:00
• Updated: 21/Mar/14 00:10
• Resolved: 07/Mar/14 22:15

Description

HADOOP-10211 changed parsing of QOP values to support a comma-separated list. This change accidentally broke backwards-compatibility with existing configs. Previously, an unrecognized value caused it to default to authentication. Now, an unrecognized value causes IllegalArgumentException. Some deployments had been using a value of "none" in insecure clusters, so the change would break those existing deployments.

Issue Links

• is broken by: HADOOP-10211 Enable RPC protocol to negotiate SASL-QOP values between clients and servers