[HADOOP-11502] SPNEGO to Web UI fails with headers larger than 4KB

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Duplicate
• Affects Version/s: 2.2.0
• Component/s: security
• Target Version/s: 2.7.0
• Assignee: Stephen Chu
• Reporter: Stephen Chu
• Created: 22/Jan/15 01:07
• Updated: 10/Apr/15 20:04
• Resolved: 22/Jan/15 01:52

Description

Thanks to bgooley for reporting this:

"""
When SSL and Kerberos Authentication is enabled for hadoop web GUIs, if the header is over 4KB in size, the browser shows a blank page.

Browser dev tools show that a 413 full head error is returned as a response from Jetty.

It seems that in HADOOP-8816, we only addressed non-ssl ports by setting ret.setHeaderBufferSize(1024*64);

However, with SSL enabled, we use SslSocketConnector() but don't set the HeaderBufferSize. I think this is why we are failing at the default Jetty max header buffer size of 4KB.
"""

Issue Links

• duplicates: HADOOP-11350 The size of header buffer of HttpServer is too small when HTTPS is enabled