Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-16095 Support impersonation for AuthenticationFilter
  3. HADOOP-16287

KerberosAuthenticationHandler Trusted Proxy Support for Knox

    XMLWordPrintableJSON

    Details

    • Type: Sub-task
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.2.0
    • Fix Version/s: 3.3.0
    • Component/s: auth
    • Labels:
      None

      Description

      Knox passes doAs with end user while accessing RM, WebHdfs Rest Api. Currently KerberosAuthenticationHandler sets the remote user to Knox. Need Trusted Proxy Support by reading doAs query parameter.

        Attachments

        1. HADOOP-16827-003.patch
          13 kB
          Prabhu Joseph
        2. HADOOP-16287-007.patch
          17 kB
          Prabhu Joseph
        3. HADOOP-16287-006.patch
          17 kB
          Prabhu Joseph
        4. HADOOP-16287-005.patch
          12 kB
          Prabhu Joseph
        5. HADOOP-16287-004.patch
          12 kB
          Prabhu Joseph
        6. HADOOP-16287-002.patch
          11 kB
          Prabhu Joseph
        7. HADOOP-16287-001.patch
          4 kB
          Prabhu Joseph

          Issue Links

            Activity

              People

              • Assignee:
                Prabhu Joseph Prabhu Joseph
                Reporter:
                Prabhu Joseph Prabhu Joseph
              • Votes:
                0 Vote for this issue
                Watchers:
                11 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: