[
https://issues.apache.org/jira/browse/HDFS-8572?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15084557#comment-15084557
]
Brahma Reddy Battula commented on HDFS-8572:
--------------------------------------------
[~wheat9] can I raise separate jira to track this..?
> DN always uses HTTP/localhost@REALM principals in SPNEGO
> --------------------------------------------------------
>
> Key: HDFS-8572
> URL: https://issues.apache.org/jira/browse/HDFS-8572
> Project: Hadoop HDFS
> Issue Type: Bug
> Reporter: Haohui Mai
> Assignee: Haohui Mai
> Priority: Blocker
> Fix For: 2.7.1
>
> Attachments: HDFS-8572.000.patch, HDFS-8572.001.patch,
> HDFS-8572.002.patch
>
>
> In HDFS-7279 the Netty server in DN proxies all servlet requests to the local
> Jetty instance.
> The Jetty server is configured incorrectly so that it always uses
> {{HTTP/locahost@REALM}} to authenticate spnego requests. As a result,
> servlets like JMX are no longer accessible in secure deployments.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
