Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-14060

HTTP servlet /logs should require authentication and authorization

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Reopened
    • Priority: Critical
    • Resolution: Unresolved
    • Affects Version/s: 3.0.0-alpha4
    • Fix Version/s: None
    • Component/s: kms
    • Labels:
      None
    • Target Version/s:

      Description

      HADOOP-14047 makes KMS call HttpServer2#setACL. Access control works fine for /conf, /jmx, /logLevel, and /stacks, but not for /logs.

      The code in AdminAuthorizedServlet#doGet for /logs and ConfServlet#doGet for /conf are quite similar. This makes me believe that /logs should subject to the same access control as intended by the original developer.

      IMHO this could either be my misconfiguration or there is a bug somewhere in HttpServer2.

        Attachments

        1. HADOOP-14060-tmp.001.patch
          1 kB
          Yuanbo Liu

          Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-13119 Add ability to secure log servlet using proxy users

          • Major - Major loss of function.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-14077 Improve the patch of HADOOP-13119

          • Major - Major loss of function.
          • Resolved
          relates to

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-14047 Require admin to access KMS instrumentation servlets

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          New Feature - A new feature of the product, which has yet to be developed. HDFS-10860 Switch HttpFS from Tomcat to Jetty

          • Blocker - Blocks development and/or testing work, production could not run
          • Resolved

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                jzhuge John Zhuge
              • Votes:
                0 Vote for this issue
                Watchers:
                12 Start watching this issue

                Dates

                • Created:
                  Updated: