[HADOOP-10417] There is no token for anonymous authentication

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Assignee: Unassigned
• Reporter: Tsz-wo Sze
• Created: 22/Mar/14 00:50
• Updated: 27/Mar/14 16:33

Description

According to tucu00, if ANONYMOUS is enabled, then there is a token (cookie) and the response is 200. However, it never sets cookie when the token is ANONYMOUS in the code below.

//AuthenticationFilter.doFilter(..)
          if (newToken && !token.isExpired() && token != AuthenticationToken.ANONYMOUS) {
            String signedToken = signer.sign(token.toString());
            createAuthCookie(httpResponse, signedToken, getCookieDomain(),
                    getCookiePath(), token.getExpires(), isHttps);
          }

Issue Links

• is related to: HADOOP-10398 KerberosAuthenticator failed to fall back to PseudoAuthenticator after HADOOP-10078