[YARN-9522] AppBlock ignores full qualified class name of PseudoAuthenticationHandler

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.2.0
• Fix Version/s: 3.3.0
• Assignee: Prabhu Joseph
• Reporter: Prabhu Joseph
• Created: 30/Apr/19 10:02
• Updated: 23/Oct/19 16:14
• Resolved: 09/May/19 21:04

Description

AuthenticationHandler can be either configured using fqcn or type. AppBlock checks for only the type simple and ignores the fqcn of PseudoAuthenticationHandler while checking whether ui is secured or not.

   * @param authHandler The short-name (or fully qualified class name) of the
   * authentication handler.

AppBlock.java

    // check if UI is unsecured.
    String httpAuth = conf.get(CommonConfigurationKeys.HADOOP_HTTP_AUTHENTICATION_TYPE);
    this.unsecuredUI = (httpAuth != null) && httpAuth.equals("simple");

Issue Links

• relates to: YARN-6890 If UI is not secured, we allow user to kill other users' job even yarn cluster is secured.