Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-8855

SSL-based image transfer does not work when Kerberos is disabled

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Minor
    • Resolution: Fixed
    • 2.0.2-alpha, 3.0.0-alpha1
    • 2.0.3-alpha
    • security
    • None
    • Reviewed

    Description

      In SecurityUtil.openSecureHttpConnection, we first check UserGroupInformation.isSecurityEnabled(). However, this only checks the kerberos config, which is independent of hadoop.ssl.enabled. Instead, we should check HttpConfig.isSecure().

      Credit to Wing Yew Poon for discovering this bug

      Attachments

        1. hadoop-8855.txt
          1.0 kB
          Todd Lipcon
        2. hadoop-8855.txt
          6 kB
          Todd Lipcon
        3. hadoop-8855.txt
          6 kB
          Todd Lipcon

        Issue Links

          Activity

            People

              tlipcon Todd Lipcon
              tlipcon Todd Lipcon
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: