[HADOOP-12049] Control http authentication cookie persistence via configuration

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.0-alpha1
• Fix Version/s: 2.8.0, 3.0.0-alpha1
• Component/s: security
• Labels: patch
• Assignee: Huizhi Lu
• Reporter: Benoy Antony
• Created: 01/Jun/15 21:45
• Updated: 12/May/16 18:27
• Resolved: 24/Jun/15 23:44

Description

During http authentication, a cookie is dropped. This is a persistent cookie. The cookie is valid across browser sessions.
For clusters which require enhanced security, it is desirable to have a session cookie so that cookie gets deleted when the user closes browser session.

It should be possible to specify cookie persistence (session or persistent) via configuration