Details

    • Type: Sub-task
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.3.0
    • Component/s: nodemanager
    • Labels:

      Description

      When user is authenticate via SPNEGO entry point, node manager must verify the remote user is the same as the container user to start the web socket session. One possible solution is to verify the web request user matches yarn container local directory owne during onWebSocketConnect..

        Attachments

        1. YARN-8838.007.patch
          9 kB
          Billie Rinaldi
        2. YARN-8838.006.patch
          9 kB
          Eric Yang
        3. YARN-8838.005.patch
          8 kB
          Eric Yang
        4. YARN-8838.004.patch
          7 kB
          Eric Yang
        5. YARN-8838.003.patch
          6 kB
          Eric Yang
        6. YARN-8838.002.patch
          3 kB
          Eric Yang
        7. YARN-8838.001.patch
          2 kB
          Eric Yang

          Issue Links

            Activity

              People

              • Assignee:
                eyang Eric Yang
                Reporter:
                eyang Eric Yang
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: