Hadoop Map/Reduce
  1. Hadoop Map/Reduce
  2. MAPREDUCE-3737

The Web Application Proxy's is not documented very well

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Critical Critical
    • Resolution: Fixed
    • Affects Version/s: 0.23.0
    • Fix Version/s: 0.23.1
    • Component/s: mrv2
    • Labels:
      None

      Description

      The Web Application Proxy is a security feature, but there is no documentation for what it does, why it does it, and more importantly what attacks it is known not protect against. This is so that anyone addopting Hadoop can know exactly what they potential security issues they may encounter.

      1. MR-3737.txt
        4 kB
        Mahadev konar
      2. MR-3737.txt
        3 kB
        Robert Joseph Evans

        Activity

        Hide
        Mahadev konar added a comment -

        The patch looks good. I am trying out generating the site. Will commit if everything works fine.

        Show
        Mahadev konar added a comment - The patch looks good. I am trying out generating the site. Will commit if everything works fine.
        Hide
        Hadoop QA added a comment -

        -1 overall. Here are the results of testing the latest attachment
        http://issues.apache.org/jira/secure/attachment/12512018/MR-3737.txt
        against trunk revision .

        +1 @author. The patch does not contain any @author tags.

        -1 tests included. The patch doesn't appear to include any new or modified tests.
        Please justify why no new tests are needed for this patch.
        Also please list what manual steps were performed to verify this patch.

        +1 javadoc. The javadoc tool did not generate any warning messages.

        +1 javac. The applied patch does not increase the total number of javac compiler warnings.

        +1 eclipse:eclipse. The patch built with eclipse:eclipse.

        +1 findbugs. The patch does not introduce any new Findbugs (version 1.3.9) warnings.

        +1 release audit. The applied patch does not increase the total number of release audit warnings.

        -1 core tests. The patch failed these unit tests:
        org.apache.hadoop.mapred.TestJobClientGetJob
        org.apache.hadoop.mapred.TestMRWithDistributedCache
        org.apache.hadoop.mapred.TestLocalModeWithNewApis

        +1 contrib tests. The patch passed contrib unit tests.

        Test results: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1685//testReport/
        Console output: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1685//console

        This message is automatically generated.

        Show
        Hadoop QA added a comment - -1 overall. Here are the results of testing the latest attachment http://issues.apache.org/jira/secure/attachment/12512018/MR-3737.txt against trunk revision . +1 @author. The patch does not contain any @author tags. -1 tests included. The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch. +1 javadoc. The javadoc tool did not generate any warning messages. +1 javac. The applied patch does not increase the total number of javac compiler warnings. +1 eclipse:eclipse. The patch built with eclipse:eclipse. +1 findbugs. The patch does not introduce any new Findbugs (version 1.3.9) warnings. +1 release audit. The applied patch does not increase the total number of release audit warnings. -1 core tests. The patch failed these unit tests: org.apache.hadoop.mapred.TestJobClientGetJob org.apache.hadoop.mapred.TestMRWithDistributedCache org.apache.hadoop.mapred.TestLocalModeWithNewApis +1 contrib tests. The patch passed contrib unit tests. Test results: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1685//testReport/ Console output: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1685//console This message is automatically generated.
        Hide
        Mahadev konar added a comment -

        The patch had an issue where the top level index doesnt have a pointer to Web App Proxy. Added that.

        Show
        Mahadev konar added a comment - The patch had an issue where the top level index doesnt have a pointer to Web App Proxy. Added that.
        Hide
        Hadoop QA added a comment -

        -1 overall. Here are the results of testing the latest attachment
        http://issues.apache.org/jira/secure/attachment/12512028/MR-3737.txt
        against trunk revision .

        +1 @author. The patch does not contain any @author tags.

        -1 tests included. The patch doesn't appear to include any new or modified tests.
        Please justify why no new tests are needed for this patch.
        Also please list what manual steps were performed to verify this patch.

        -1 patch. The patch command could not apply the patch.

        Console output: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1688//console

        This message is automatically generated.

        Show
        Hadoop QA added a comment - -1 overall. Here are the results of testing the latest attachment http://issues.apache.org/jira/secure/attachment/12512028/MR-3737.txt against trunk revision . +1 @author. The patch does not contain any @author tags. -1 tests included. The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch. -1 patch. The patch command could not apply the patch. Console output: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1688//console This message is automatically generated.
        Hide
        Mahadev konar added a comment -

        I just committed this. Thanks Bobby!

        Show
        Mahadev konar added a comment - I just committed this. Thanks Bobby!
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Hdfs-trunk-Commit #1668 (See https://builds.apache.org/job/Hadoop-Hdfs-trunk-Commit/1668/)
        MAPREDUCE-3737. The Web Application Proxy's is not documented very well. (Robert Evans via mahadev)

        mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236371
        Files :

        • /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        • /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm
        • /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm
        • /hadoop/common/trunk/hadoop-project/src/site/site.xml
        Show
        Hudson added a comment - Integrated in Hadoop-Hdfs-trunk-Commit #1668 (See https://builds.apache.org/job/Hadoop-Hdfs-trunk-Commit/1668/ ) MAPREDUCE-3737 . The Web Application Proxy's is not documented very well. (Robert Evans via mahadev) mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236371 Files : /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm /hadoop/common/trunk/hadoop-project/src/site/site.xml
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Common-trunk-Commit #1596 (See https://builds.apache.org/job/Hadoop-Common-trunk-Commit/1596/)
        MAPREDUCE-3737. The Web Application Proxy's is not documented very well. (Robert Evans via mahadev)

        mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236371
        Files :

        • /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        • /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm
        • /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm
        • /hadoop/common/trunk/hadoop-project/src/site/site.xml
        Show
        Hudson added a comment - Integrated in Hadoop-Common-trunk-Commit #1596 (See https://builds.apache.org/job/Hadoop-Common-trunk-Commit/1596/ ) MAPREDUCE-3737 . The Web Application Proxy's is not documented very well. (Robert Evans via mahadev) mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236371 Files : /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm /hadoop/common/trunk/hadoop-project/src/site/site.xml
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Hdfs-0.23-Commit #419 (See https://builds.apache.org/job/Hadoop-Hdfs-0.23-Commit/419/)
        MAPREDUCE-3737. The Web Application Proxy's is not documented very well. (Robert Evans via mahadev) - Merging r1236371 from trunk.

        mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236373
        Files :

        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm
        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm
        • /hadoop/common/branches/branch-0.23/hadoop-project/src/site/site.xml
        Show
        Hudson added a comment - Integrated in Hadoop-Hdfs-0.23-Commit #419 (See https://builds.apache.org/job/Hadoop-Hdfs-0.23-Commit/419/ ) MAPREDUCE-3737 . The Web Application Proxy's is not documented very well. (Robert Evans via mahadev) - Merging r1236371 from trunk. mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236373 Files : /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm /hadoop/common/branches/branch-0.23/hadoop-project/src/site/site.xml
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Common-0.23-Commit #428 (See https://builds.apache.org/job/Hadoop-Common-0.23-Commit/428/)
        MAPREDUCE-3737. The Web Application Proxy's is not documented very well. (Robert Evans via mahadev) - Merging r1236371 from trunk.

        mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236373
        Files :

        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm
        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm
        • /hadoop/common/branches/branch-0.23/hadoop-project/src/site/site.xml
        Show
        Hudson added a comment - Integrated in Hadoop-Common-0.23-Commit #428 (See https://builds.apache.org/job/Hadoop-Common-0.23-Commit/428/ ) MAPREDUCE-3737 . The Web Application Proxy's is not documented very well. (Robert Evans via mahadev) - Merging r1236371 from trunk. mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236373 Files : /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm /hadoop/common/branches/branch-0.23/hadoop-project/src/site/site.xml
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Mapreduce-trunk-Commit #1612 (See https://builds.apache.org/job/Hadoop-Mapreduce-trunk-Commit/1612/)
        MAPREDUCE-3737. The Web Application Proxy's is not documented very well. (Robert Evans via mahadev)

        mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236371
        Files :

        • /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        • /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm
        • /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm
        • /hadoop/common/trunk/hadoop-project/src/site/site.xml
        Show
        Hudson added a comment - Integrated in Hadoop-Mapreduce-trunk-Commit #1612 (See https://builds.apache.org/job/Hadoop-Mapreduce-trunk-Commit/1612/ ) MAPREDUCE-3737 . The Web Application Proxy's is not documented very well. (Robert Evans via mahadev) mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236371 Files : /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm /hadoop/common/trunk/hadoop-project/src/site/site.xml
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Mapreduce-0.23-Commit #444 (See https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Commit/444/)
        MAPREDUCE-3737. The Web Application Proxy's is not documented very well. (Robert Evans via mahadev) - Merging r1236371 from trunk.

        mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236373
        Files :

        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm
        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm
        • /hadoop/common/branches/branch-0.23/hadoop-project/src/site/site.xml
        Show
        Hudson added a comment - Integrated in Hadoop-Mapreduce-0.23-Commit #444 (See https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Commit/444/ ) MAPREDUCE-3737 . The Web Application Proxy's is not documented very well. (Robert Evans via mahadev) - Merging r1236371 from trunk. mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236373 Files : /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm /hadoop/common/branches/branch-0.23/hadoop-project/src/site/site.xml
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Hdfs-trunk #938 (See https://builds.apache.org/job/Hadoop-Hdfs-trunk/938/)
        MAPREDUCE-3737. The Web Application Proxy's is not documented very well. (Robert Evans via mahadev)

        mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236371
        Files :

        • /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        • /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm
        • /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm
        • /hadoop/common/trunk/hadoop-project/src/site/site.xml
        Show
        Hudson added a comment - Integrated in Hadoop-Hdfs-trunk #938 (See https://builds.apache.org/job/Hadoop-Hdfs-trunk/938/ ) MAPREDUCE-3737 . The Web Application Proxy's is not documented very well. (Robert Evans via mahadev) mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236371 Files : /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm /hadoop/common/trunk/hadoop-project/src/site/site.xml
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Hdfs-0.23-Build #151 (See https://builds.apache.org/job/Hadoop-Hdfs-0.23-Build/151/)
        MAPREDUCE-3737. The Web Application Proxy's is not documented very well. (Robert Evans via mahadev) - Merging r1236371 from trunk.

        mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236373
        Files :

        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm
        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm
        • /hadoop/common/branches/branch-0.23/hadoop-project/src/site/site.xml
        Show
        Hudson added a comment - Integrated in Hadoop-Hdfs-0.23-Build #151 (See https://builds.apache.org/job/Hadoop-Hdfs-0.23-Build/151/ ) MAPREDUCE-3737 . The Web Application Proxy's is not documented very well. (Robert Evans via mahadev) - Merging r1236371 from trunk. mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236373 Files : /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm /hadoop/common/branches/branch-0.23/hadoop-project/src/site/site.xml
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Mapreduce-trunk #971 (See https://builds.apache.org/job/Hadoop-Mapreduce-trunk/971/)
        MAPREDUCE-3737. The Web Application Proxy's is not documented very well. (Robert Evans via mahadev)

        mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236371
        Files :

        • /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
        • /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm
        • /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm
        • /hadoop/common/trunk/hadoop-project/src/site/site.xml
        Show
        Hudson added a comment - Integrated in Hadoop-Mapreduce-trunk #971 (See https://builds.apache.org/job/Hadoop-Mapreduce-trunk/971/ ) MAPREDUCE-3737 . The Web Application Proxy's is not documented very well. (Robert Evans via mahadev) mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236371 Files : /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm /hadoop/common/trunk/hadoop-project/src/site/site.xml
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Mapreduce-0.23-Build #173 (See https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Build/173/)
        MAPREDUCE-3737. The Web Application Proxy's is not documented very well. (Robert Evans via mahadev) - Merging r1236371 from trunk.

        mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236373
        Files :

        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm
        • /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm
        • /hadoop/common/branches/branch-0.23/hadoop-project/src/site/site.xml
        Show
        Hudson added a comment - Integrated in Hadoop-Mapreduce-0.23-Build #173 (See https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Build/173/ ) MAPREDUCE-3737 . The Web Application Proxy's is not documented very well. (Robert Evans via mahadev) - Merging r1236371 from trunk. mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1236373 Files : /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/WebApplicationProxy.apt.vm /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/index.apt.vm /hadoop/common/branches/branch-0.23/hadoop-project/src/site/site.xml

          People

          • Assignee:
            Robert Joseph Evans
            Reporter:
            Robert Joseph Evans
          • Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development