[KNOX-1857] YARNUIV2 fails with Authentication Required with kerberos authentication type

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0.0
• Fix Version/s: 1.3.0
• Component/s: Server
• Assignee: Prabhu Joseph
• Reporter: Prabhu Joseph
• Created: 07/May/19 14:28
• Updated: 23/Oct/19 16:14
• Resolved: 07/May/19 15:06

Description

YARNUIV2 fails with Authentication Required with kerberos authentication type whereas YARNUI works fine.

Problem accessing /ui2/. Reason:

Authentication required

As per RM logs, Knox sends request with Authorization field which does not start with Negotiate.
In case of YARNUI, this field is excluded by the Dispatcher.

2019-05-02 15:32:30,808 WARN  server.KerberosAuthenticationHandler (KerberosAuthenticationHandler.java:authenticate(274)) - 'Authorization' does not start with 'Negotiate' :  Basic YW1iYXJpLXFhOkJhZFBhc3MjMQ==

YARNUIV2 service.xml configures PassAllHeadersDispatch whereas YARNUI has DefaultDispatch which excludes Authorization field.