Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-8572

DN always uses HTTP/localhost@REALM principals in SPNEGO

VotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.8.0, 2.7.1, 3.0.0-alpha1
    • Component/s: None
    • Labels:
      None
    • Target Version/s:
    • Hadoop Flags:
      Reviewed

      Description

      In HDFS-7279 the Netty server in DN proxies all servlet requests to the local Jetty instance.

      The Jetty server is configured incorrectly so that it always uses HTTP/locahost@REALM to authenticate spnego requests. As a result, servlets like JMX are no longer accessible in secure deployments.

        Attachments

        1. HDFS-8572.000.patch
          9 kB
          Haohui Mai
        2. HDFS-8572.001.patch
          9 kB
          Haohui Mai
        3. HDFS-8572.002.patch
          9 kB
          Haohui Mai

        Issue Links

          Activity

            People

            • Assignee:
              wheat9 Haohui Mai
              Reporter:
              wheat9 Haohui Mai

              Dates

              • Created:
                Updated:
                Resolved:

                Issue deployment