Hadoop HDFS
  1. Hadoop HDFS
  2. HDFS-4576 Webhdfs authentication issues
  3. HDFS-4542

Webhdfs doesn't support secure proxy users

        Details

        • Type: Sub-task Sub-task
        • Status: Closed
        • Priority: Blocker Blocker
        • Resolution: Fixed
        • Affects Version/s: 0.23.0, 2.0.0-alpha, 3.0.0
        • Fix Version/s: 3.0.0, 0.23.7, 2.1.0-beta
        • Component/s: webhdfs
        • Labels:
          None

          Description

          Webhdfs doesn't ever send the DoAsParam in the REST calls for proxy users. Proxy users on a non-secure cluster "work" because the server sees them as the effective user, not a proxy user, which effectively bypasses the proxy authorization checks. On secure clusters, it doesn't work at all in part due to wrong ugi being used for the connection (HDFS-3367), but then it fails because the effective user tries to use a non-proxy token for the real user.

          1. Text File
            HDFS-4542.patch
            19 kB
            Daryn Sharp
          2. Text File
            HDFS-4542.branch-23.patch
            19 kB
            Daryn Sharp
          3. Text File
            HDFS-4542.patch
            19 kB
            Daryn Sharp

            Issue Links

            depends upon

            Improvement - An improvement or enhancement to an existing feature or task. HADOOP-9352 Expose UGI.setLoginUser for tests

            • Major - Major loss of function.
            • Closed
            is required by

            Sub-task - The sub-task of the issue HDFS-3367 WebHDFS doesn't use the logged in user when opening connections

            • Critical - Crashes, loss of data, severe memory leak.
            • Resolved
            relates to

            Sub-task - The sub-task of the issue HDFS-4560 Webhdfs cannot use tokens obtained by another user

            • Major - Major loss of function.
            • Closed

              Activity

              Ascending order - Click to sort in descending order
              Daryn Sharp created issue -
              Daryn Sharp made changes -
              Field Original Value New Value
              Link This issue is required by HDFS-3367 [ HDFS-3367 ]
              Daryn Sharp made changes -
              Attachment HDFS-4542.patch [ 12571649 ]
              Daryn Sharp made changes -
              Status Open [ 1 ] Patch Available [ 10002 ]
              Daryn Sharp made changes -
              Link This issue depends on HADOOP-9352 [ HADOOP-9352 ]
              Daryn Sharp made changes -
              Attachment HDFS-4542.patch [ 12571886 ]
              Daryn Sharp made changes -
              Attachment HDFS-4542.branch-23.patch [ 12571889 ]
              Daryn Sharp made changes -
              Attachment HDFS-4542.patch [ 12571886 ]
              Daryn Sharp made changes -
              Attachment HDFS-4542.patch [ 12571896 ]
              Kihwal Lee made changes -
              Status Patch Available [ 10002 ] Resolved [ 5 ]
              Fix Version/s 3.0.0 [ 12320356 ]
              Fix Version/s 0.23.7 [ 12323955 ]
              Fix Version/s 2.0.4-beta [ 12324031 ]
              Resolution Fixed [ 1 ]
              Daryn Sharp made changes -
              Link This issue relates to HDFS-4560 [ HDFS-4560 ]
              Daryn Sharp made changes -
              Parent HDFS-4576 [ 12636032 ]
              Issue Type Bug [ 1 ] Sub-task [ 7 ]
              Gavin made changes -
              Link This issue depends on HADOOP-9352 [ HADOOP-9352 ]
              Gavin made changes -
              Link This issue depends upon HADOOP-9352 [ HADOOP-9352 ]
              Arun C Murthy made changes -
              Status Resolved [ 5 ] Closed [ 6 ]

                People

                • Assignee:
                  Daryn Sharp
                  Reporter:
                  Daryn Sharp
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  10 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Development