[
https://issues.apache.org/jira/browse/FALCON-1943?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sowmya Ramesh resolved FALCON-1943.
-----------------------------------
Resolution: Fixed
commit 4ccd3b119389e9707cc69ef89e6d38dd6639cb32
> Extension API/CLI fails when authorization is enabled
> -----------------------------------------------------
>
> Key: FALCON-1943
> URL: https://issues.apache.org/jira/browse/FALCON-1943
> Project: Falcon
> Issue Type: Bug
> Reporter: Sowmya Ramesh
> Assignee: Sowmya Ramesh
>
> Extension REST API's fail with Authorization failed : 400/Illegal resource
> {noformat}
> 2016-05-06 00:42:59,616 INFO - [main:] ~ Generated
> unique-instance-id=ac165f6421108-os-r6-mhblfu-falcon-3-31
> (GraphDatabaseConfiguration:1469)
> 2016-05-06 00:42:59,660 INFO - [main:] ~ Initiated backend operations thread
> pool of size 4 (Backend:168)
> 2016-05-06 00:42:59,744 INFO - [main:] ~ Loaded unidentified ReadMarker
> start time Timepoint[1462495379743000 μs] into
> com.thinkaurelius.titan.diskstorage.log.kcvs.KCVSLog$MessagePuller@3520a0d7
> (KCVSLog:733)
> 2016-05-06 00:42:59,947 INFO - [main:] ~ Indexes already exist for graph
> (MetadataMappingService:148)
> 2016-05-06 00:42:59,948 INFO - [main:] ~ Initialized graph db:
> titangraph[berkeleyje:/hadoop/falcon/data/lineage/graphdb]
> (MetadataMappingService:93)
> 2016-05-06 00:42:59,950 INFO - [main:] ~ Init vertex property keys: [name,
> type, version, timestamp] (MetadataMappingService:96)
> 2016-05-06 00:42:59,953 INFO - [main:] ~ Init edge property keys: [name,
> type, version, timestamp] (MetadataMappingService:99)
> 2016-05-06 00:42:59,958 INFO - [main:] ~ Service initialized:
> org.apache.falcon.metadata.MetadataMappingService (ServiceInitializer:52)
> 2016-05-06 00:42:59,961 INFO - [main:] ~ FalconAuditFilter initialization
> started (FalconAuditFilter:49)
> 2016-05-06 00:42:59,965 INFO - [main:] ~ FalconAuthenticationFilter
> initialization started (FalconAuthenticationFilter:83)
> 2016-05-06 00:42:59,985 INFO - [main:] ~ Falcon is running with
> authorization enabled (FalconAuthorizationFilter:62)
> 2016-05-06 00:43:01,623 INFO - [main:] ~ Started
> [email protected]:15000 (log:67)
> 2016-05-06 00:43:08,832 INFO - [1706292388@qtp-1610702581-0 -
> 88ba0bf7-2300-48a5-92a7-fede4775b523:] ~ HttpServletRequest RemoteUser is
> null (Servlets:47)
> 2016-05-06 00:43:08,836 INFO - [1706292388@qtp-1610702581-0 -
> 88ba0bf7-2300-48a5-92a7-fede4775b523:] ~ HttpServletRequest user.name param
> value is falcon (Servlets:53)
> 2016-05-06 00:43:08,838 DEBUG - [1706292388@qtp-1610702581-0 -
> 88ba0bf7-2300-48a5-92a7-fede4775b523:] ~ Audit: falcon/172.22.95.100
> performed request
> http://os-r6-mhblfu-falcon-3-3.openstacklocal:15000/api/options?user.name=falcon
> (172.22.95.100) at time 2016-05-06T00:43Z (FalconAuditFilter:86)
> 2016-05-06 00:43:08,875 INFO - [1706292388@qtp-1610702581-0 -
> ba3e5632-1457-415e-bdd4-4a81d31c4f70:] ~ HttpServletRequest RemoteUser is
> null (Servlets:47)
> 2016-05-06 00:43:08,876 INFO - [1706292388@qtp-1610702581-0 -
> ba3e5632-1457-415e-bdd4-4a81d31c4f70:] ~ HttpServletRequest user.name param
> value is falcon (Servlets:53)
> 2016-05-06 00:43:08,876 DEBUG - [1706292388@qtp-1610702581-0 -
> ba3e5632-1457-415e-bdd4-4a81d31c4f70:] ~ Audit: falcon/172.22.95.100
> performed request
> http://os-r6-mhblfu-falcon-3-3.openstacklocal:15000/api/options?user.name=falcon&user.name=falcon
> (172.22.95.100) at time 2016-05-06T00:43Z (FalconAuditFilter:86)
> 2016-05-06 00:43:08,917 INFO - [1706292388@qtp-1610702581-0 -
> 87cabbc5-87d9-45d3-aac8-5620c7cee207:] ~ HttpServletRequest RemoteUser is
> falcon (Servlets:47)
> 2016-05-06 00:43:08,919 INFO - [1706292388@qtp-1610702581-0 -
> 87cabbc5-87d9-45d3-aac8-5620c7cee207:falcon:GET//extension/enumerate/] ~
> Logging in falcon (CurrentUser:65)
> 2016-05-06 00:43:08,919 INFO - [1706292388@qtp-1610702581-0 -
> 87cabbc5-87d9-45d3-aac8-5620c7cee207:falcon:GET//extension/enumerate/] ~
> Request from authenticated user: falcon, URL=/api/extension/enumerate/, doAs
> user: null (FalconAuthenticationFilter:185)
> 2016-05-06 00:43:08,921 INFO - [1706292388@qtp-1610702581-0 -
> 87cabbc5-87d9-45d3-aac8-5620c7cee207:falcon:GET//extension/enumerate/] ~
> Authorizing user=falcon against request=RequestParts{resource='extension',
> action='enumerate'} (FalconAuthorizationFilter:78)
> 2016-05-06 00:43:08,922 ERROR - [1706292388@qtp-1610702581-0 -
> 87cabbc5-87d9-45d3-aac8-5620c7cee207:falcon:GET//extension/enumerate/] ~
> Authorization failed : 400/Illegal resource: extension
> (FalconAuthorizationFilter:155)
> 2016-05-06 00:43:08,931 DEBUG - [1706292388@qtp-1610702581-0 -
> 87cabbc5-87d9-45d3-aac8-5620c7cee207:] ~ Audit: falcon/172.22.95.100
> performed request
> http://os-r6-mhblfu-falcon-3-3.openstacklocal:15000/api/extension/enumerate/
> (172.22.95.100) at time 2016-05-06T00:43Z (FalconAuditFilter:86)
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
