[HDFS-16563] Namenode WebUI prints sensitive information on Token Expiry

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3.3
• Fix Version/s: 3.4.0, 3.3.5
• Component/s: namenode, security, webhdfs
• Labels: pull-request-available
• Assignee: Renukaprasad C
• Reporter: Renukaprasad C
• Created: 27/Apr/22 17:31
• Updated: 16/Oct/24 18:29
• Resolved: 07/Jun/22 13:33

Description

Login to Namenode WebUI.

Wait for token to expire. (Or modify the Token refresh time 

dfs.namenode.delegation.token.renew/update-interval to lower value)

Refresh the WebUI after the Token expiry.

Full token information gets printed in WebUI.

 

causes YARN-11172; all branches with this patch need that fix in too

Issue Links

• causes: MAPREDUCE-7387 Fix TestJHSSecurity#testDelegationToken AssertionError due to HDFS-16563
• causes: YARN-11172 Fix testDelegationToken
• causes: HADOOP-18284 Remove Unnecessary semicolon ';'
• links to: GitHub Pull Request #4241