Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-8572

DN always uses HTTP/localhost@REALM principals in SPNEGO

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.8.0, 2.7.1, 3.0.0-alpha1
    • Component/s: None
    • Labels:
      None
    • Target Version/s:
    • Hadoop Flags:
      Reviewed

      Description

      In HDFS-7279 the Netty server in DN proxies all servlet requests to the local Jetty instance.

      The Jetty server is configured incorrectly so that it always uses HTTP/locahost@REALM to authenticate spnego requests. As a result, servlets like JMX are no longer accessible in secure deployments.

        Attachments

        1. HDFS-8572.002.patch
          9 kB
          Haohui Mai
        2. HDFS-8572.001.patch
          9 kB
          Haohui Mai
        3. HDFS-8572.000.patch
          9 kB
          Haohui Mai

          Issue Links

            Activity

              People

              • Assignee:
                wheat9 Haohui Mai
                Reporter:
                wheat9 Haohui Mai
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: