[HADOOP-11099] KMS return HTTP UNAUTHORIZED 401 on ACL failure

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.6.0
• Component/s: security
• Target Version/s: 2.6.0
• Hadoop Flags: Reviewed
• Assignee: Alejandro Abdelnur
• Reporter: Alejandro Abdelnur
• Created: 17/Sep/14 04:28
• Updated: 01/Dec/14 03:10
• Resolved: 17/Sep/14 18:13

Description

The usual error, HTTP UNAUTHORIZED means is for authentication, not for authorization.

KMS should return HTTP FORBIDDEN in case of ACL failure.

Issue Links

• blocks: HADOOP-11016 KMS should support signing cookies with zookeeper secret manager