[
https://issues.apache.org/jira/browse/HADOOP-10895?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Yongjun Zhang updated HADOOP-10895:
-----------------------------------
Release Note:
Prior to this fix, the fallback from kerberos authenticator to pseudo
authenticator is enabled as hardcoded. After the fix, the fallback is disabled
by default, and user need to set configuration property
"ipc.client.fallback-to-simple-auth-allowed" to "true" to enable it.
Application may also call
KerberosAuthenticator.setAllowFallbackToPseudoAuthDefault(true) at
initialization time to change the default to true, or uses the non-default
constructor of KerberosAuthenticator and KerberosDelegationTokenAuthenticator
to change the per-authenticator setting.
was:
Prior to this fix, the fallback from kerberos authenticator to pseudo
authenticator is enabled as hardcoded. After the fix, the fallback is disabled
by default, and user need to set configuration property
"ipc.client.fallback-to-simple-auth-allowed" to "true" to enable it.
> HTTP KerberosAuthenticator fallback should have a flag to disable it
> --------------------------------------------------------------------
>
> Key: HADOOP-10895
> URL: https://issues.apache.org/jira/browse/HADOOP-10895
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 2.4.1
> Reporter: Alejandro Abdelnur
> Assignee: Yongjun Zhang
> Priority: Blocker
> Attachments: HADOOP-10895.001.patch, HADOOP-10895.002.patch,
> HADOOP-10895.003.patch, HADOOP-10895.003v1.patch, HADOOP-10895.003v2.patch,
> HADOOP-10895.003v2improved.patch, HADOOP-10895.004.patch,
> HADOOP-10895.005.patch, HADOOP-10895.006.patch, HADOOP-10895.007.patch,
> HADOOP-10895.008.patch, HADOOP-10895.009.patch
>
>
> Per review feedback in HADOOP-10771, {{KerberosAuthenticator}} and the
> delegation token version coming in with HADOOP-10771 should have a flag to
> disable fallback to pseudo, similarly to the one that was introduced in
> Hadoop RPC client with HADOOP-9698.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
