Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-4576 Webhdfs authentication issues
  3. HDFS-4564

Webhdfs returns incorrect http response codes for denied operations

VotersStop watchingWatchersLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Blocker
    • Resolution: Fixed
    • 0.23.0, 2.0.0-alpha, 3.0.0-alpha1
    • 2.4.0
    • webhdfs
    • None

    Description

      Webhdfs is returning 401 (Unauthorized) instead of 403 (Forbidden) when it's denying operations. Examples including rejecting invalid proxy user attempts and renew/cancel with an invalid user.

      Attachments

        1. HDFS-4564.branch-23.patch
          11 kB
          Daryn Sharp
        2. HDFS-4564.branch-23.patch
          4 kB
          Daryn Sharp
        3. HDFS-4564.patch
          6 kB
          Daryn Sharp
        4. HDFS-4564.branch-23.patch
          5 kB
          Daryn Sharp
        5. HDFS-4564.patch
          6 kB
          Daryn Sharp

        Issue Links

        is related to

        Bug - A problem which impairs or prevents the functions of the product. HADOOP-9363 AuthenticatedURL will NPE if server closes connection

        • Major - Major loss of function.
        • Open

        Bug - A problem which impairs or prevents the functions of the product. HADOOP-10453 Do not use AuthenticatedURL in hadoop core

        • Major - Major loss of function.
        • Open
        relates to

        Sub-task - The sub-task of the issue HDFS-4548 Webhdfs doesn't renegotiate SPNEGO token

        • Blocker - Blocks development and/or testing work, production could not run
        • Closed
        requires

        Bug - A problem which impairs or prevents the functions of the product. HADOOP-10301 AuthenticationFilter should return Forbidden for failed authentication

        • Blocker - Blocks development and/or testing work, production could not run
        • Closed

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            daryn Daryn Sharp
            daryn Daryn Sharp
            Votes:
            0 Vote for this issue
            Watchers:
            14 Stop watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment