Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-11502

SPNEGO to Web UI fails with headers larger than 4KB

VotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Duplicate
    • Affects Version/s: 2.2.0
    • Fix Version/s: None
    • Component/s: security
    • Labels:
      None
    • Target Version/s:

      Description

      Thanks to Ben Gooley for reporting this:

      """
      When SSL and Kerberos Authentication is enabled for hadoop web GUIs, if the header is over 4KB in size, the browser shows a blank page.

      Browser dev tools show that a 413 full head error is returned as a response from Jetty.

      It seems that in HADOOP-8816, we only addressed non-ssl ports by setting ret.setHeaderBufferSize(1024*64);

      However, with SSL enabled, we use SslSocketConnector() but don't set the HeaderBufferSize. I think this is why we are failing at the default Jetty max header buffer size of 4KB.
      """

        Attachments

        1. HADOOP-11502.1.patch
          3 kB
          Stephen Chu

        Issue Links

          Activity

            People

            • Assignee:
              schu Stephen Chu
              Reporter:
              schu Stephen Chu

              Dates

              • Created:
                Updated:
                Resolved:

                Issue deployment