[YARN-3855] If acl is enabled and http.authentication.type is simple, user cannot view the app page in default setup

• Type: Bug
• Status: Patch Available
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Labels: oct16-medium
• Assignee: Jian He
• Reporter: Jian He
• Created: 25/Jun/15 22:05
• Updated: 27/Oct/16 18:45

Description

If all ACLs (admin acl, queue-admin-acls etc.) are setup properly and "http.authentication.type" is 'simple' in secure mode , user cannot view the application web page in default setup because the incoming user is always considered as "dr.who" . User also cannot pass "user.name" to indicate the incoming user name, because AuthenticationFilterInitializer is not enabled by default. This is inconvenient from user's perspective.