Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-11502

SPNEGO to Web UI fails with headers larger than 4KB

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Duplicate
    • Affects Version/s: 2.2.0
    • Fix Version/s: None
    • Component/s: security
    • Labels:
      None
    • Target Version/s:

      Description

      Thanks to Ben Gooley for reporting this:

      """
      When SSL and Kerberos Authentication is enabled for hadoop web GUIs, if the header is over 4KB in size, the browser shows a blank page.

      Browser dev tools show that a 413 full head error is returned as a response from Jetty.

      It seems that in HADOOP-8816, we only addressed non-ssl ports by setting ret.setHeaderBufferSize(1024*64);

      However, with SSL enabled, we use SslSocketConnector() but don't set the HeaderBufferSize. I think this is why we are failing at the default Jetty max header buffer size of 4KB.
      """

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                schu Stephen Chu
                Reporter:
                schu Stephen Chu
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: