Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-8855

SSL-based image transfer does not work when Kerberos is disabled

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Minor
    • Resolution: Fixed
    • 2.0.2-alpha, 3.0.0-alpha1
    • 2.0.3-alpha
    • security
    • None
    • Reviewed

    Description

      In SecurityUtil.openSecureHttpConnection, we first check UserGroupInformation.isSecurityEnabled(). However, this only checks the kerberos config, which is independent of hadoop.ssl.enabled. Instead, we should check HttpConfig.isSecure().

      Credit to Wing Yew Poon for discovering this bug

      Attachments

        1. hadoop-8855.txt
          1.0 kB
          Todd Lipcon
        2. hadoop-8855.txt
          6 kB
          Todd Lipcon
        3. hadoop-8855.txt
          6 kB
          Todd Lipcon

        Issue Links

          breaks

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-9899 Remove the debug message added by HADOOP-8855

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          is depended upon by

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-8883 Anonymous fallback in KerberosAuthenticator is broken

          • Major - Major loss of function.
          • Closed
          is related to

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-8859 Improve SecurityUtil#openSecureHttpConnection javadoc

          • Major - Major loss of function.
          • Open
          relates to

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-10078 KerberosAuthenticator always does SPNEGO

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Activity

            People

              tlipcon Todd Lipcon
              tlipcon Todd Lipcon
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: