[
https://issues.apache.org/jira/browse/KNOX-303?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13924376#comment-13924376
]
Larry McCay commented on KNOX-303:
----------------------------------
Provider parameters aren't evaluated until runtime therefore we can't halt
deployment which would be ideal.
Invalid configuration will result in the AclParser throwing an
InvalidACLException and thus result in an HTTP status code of 500 with
appropriate error message.
> Handle Invalid SLA ACL Configuration
> ------------------------------------
>
> Key: KNOX-303
> URL: https://issues.apache.org/jira/browse/KNOX-303
> Project: Apache Knox
> Issue Type: Bug
> Components: Server
> Reporter: Larry McCay
>
> 1. Indexoutof bounds
> when ACL value is
> <param>
> <name>webhdfs.acl</name>
> <value>guest</value>
> </param>
> at
> org.apache.hadoop.gateway.filter.AclsAuthorizationFilter.parseGroupAcls(AclsAuthorizationFilter.java:120)
> at
> org.apache.hadoop.gateway.filter.AclsAuthorizationFilter.parseAcls(AclsAuthorizationFilter.java:98)
> at
> org.apache.hadoop.gateway.filter.AclsAuthorizationFilter.init(AclsAuthorizationFilter.java:77)
> at
> org.apache.hadoop.gateway.GatewayFilter$Holder.getInstance(GatewayFilter.java:341)
> at
> org.apache.hadoop.gateway.GatewayFilter$Holder.doFilter(GatewayFilter.java:311)
> at
> org.apache.hadoop.gateway.GatewayFilter$Chain.doFilter(GatewayFilter.java:212)
> at
> org.apache.hadoop.gateway.filter.security.AbstractIdentityAssertionFilter.doFilterInternal(AbstractIdentityAssertionFilter.java:209)
> at
> org.apache.hadoop.gateway.filter.security.AbstractIdentityAssertionFilter.continueChainAsPrincipal(AbstractIdentityAssertionFilter.java:157)
> at
> org.apache.hadoop.gateway.identityasserter.filter.IdentityAsserterFilter.doFilter(IdentityAsserterFilter.java:55)
> 1. Leads to Null pointer when value =
> <param>
> <name>webhdfs.acl</name>
> <value>guest;;</value>
> </param>
> Server Error</pre></p><h3>Caused
> by:</h3><pre>org.apache.shiro.subject.ExecutionException:
> java.security.PrivilegedActionException: javax.servlet.ServletException:
> java.lang.NullPointerException
> at
> org.apache.shiro.subject.support.DelegatingSubject.execute(DelegatingSubject.java:385)
> at
> org.apache.hadoop.gateway.filter.ShiroSubjectIdentityAdapter.doFilter(ShiroSubjectIdentityAdapter.java:74)
> at
> org.apache.hadoop.gateway.GatewayFilter$Holder.doFilter(GatewayFilter.java:311)
> at
> org.apache.hadoop.gateway.GatewayFilter$Chain.doFilter(GatewayFilter.java:212)
> at
> org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:61)
> at
> org.apache.shiro.web.servlet.AdviceFilter.executeChain(AdviceFilter.java:108)
--
This message was sent by Atlassian JIRA
(v6.2#6252)
