[STORM-678] Storm UI Spengo filter doesn't invalidate user session immediately upon kinit as a different user

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Not A Problem
• Affects Version/s: 0.9.3
• Component/s: storm-core
• Labels: Security Storm storm-security
• Environment: CentOS 6.6 64bit; Java jdk1.7.0_67; Kerberos enabled
• Assignee: Harsha
• Reporter: Manish Nema
• Created: 19/Feb/15 03:47
• Updated: 05/Oct/15 01:04
• Resolved: 19/Feb/15 05:56

Description

I am using HDP 2.2 which includes fixes of https://issues.apache.org/jira/browse/STORM-216.

Install STORM with Nagios and Ganglia, there is no HDFS, Hadoop installed on the cluster, cluster is made of three nodes.
Enable security as guided by Ambari, kerberize the cluster this covers everything as specified in the https://github.com/apache/storm/blob/security/SECURITY.md .

Now submit job from 'test' user principal from the gateway node. Open Storm UI in firefox or google-chrome it shows the topology running as 'test' user.
Now kinit with another user 'test2' refresh the UI. It still says the 'test' user . Even closing and re-opening firefox /chrome doesnt help. It lets 'test2' user kill topology of 'test' user.

This behaviour is not observed when using storm kill command in command line