[HADOOP-18120] Hadoop auth does not handle HTTP Headers in a case-insensitive way

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 3.4.0
• Component/s: auth
• Labels: pull-request-available
• Hadoop Flags: Reviewed
• Assignee: János Makai
• Reporter: Daniel Fritsi
• Created: 10/Feb/22 20:33
• Updated: 20/May/22 14:53
• Resolved: 20/May/22 08:52

Description

According to RFC-2616 HTTP Headers are case-insensitive. There are proxies / load balancers (e.g.: newer versions of HA-proxy) which deliberately make some of the HTTP headers lower-case results in an authentication / authorization failure inside the Hadoop codebase.

I've created a small patch (I'm from Cloudera): [^hadoop-auth-headers.patch]. This resolves our authentication issue. Can someone please have a look at this?

Issue Links

• links to: GitHub Pull Request #4300