Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-13718

There is no filterInitializer for initializing DelegationTokenAuthenticationFilter in Hadoop common

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Duplicate
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: None
    • Labels:
      None
    • Environment:

      Description

      There is no filterInitializer for initializing DelegationTokenFilter in Hadoop common.
      Yarn implement its own filterInitializer RMAuthenticationFilterInitializer to add DelegationTokenFilter to support proxy user and delegation token authentication.

      This is useful to use DelegationTokenAuthenticationFilter for HADOOP Web Console authentication. Especially after KNOX-565, all quick link could go through knox and we'll need DelegationTokenAuthenticationFilter to do the "getDoAsUser" job and call kerberosAuthenticationHandler for us.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                Wancy Shi Wang
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: