[
https://issues.apache.org/jira/browse/HDFS-5217?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jing Zhao updated HDFS-5217:
----------------------------
Attachment: HDFS-5217.001.patch
Update the patch.
I followed the instruction in the HttpAuthentication link and enabled Spnego
authentication in the http server. The old patch did not break the Spnego, but
with Spnego enabled the log directory link is inaccessible again.
Since the cause of the issue is that the getRemoteUser call on the http request
returns null, and the AuthenticationFilter wraps the http request with the
short name retrieved from the token, we do not need to add the security handler
(and the user realm) when AuthenticationFilter is specified. So in the new
patch I simply check if AuthenticationFilter has been specified in the
configuration.
I have locally tested the patch with/without specifying Spnego. And with the
patch the log directory link can be visited.
> Namenode log directory link is inaccessible in secure cluster
> -------------------------------------------------------------
>
> Key: HDFS-5217
> URL: https://issues.apache.org/jira/browse/HDFS-5217
> Project: Hadoop HDFS
> Issue Type: Bug
> Affects Versions: 3.0.0
> Reporter: Jing Zhao
> Assignee: Jing Zhao
> Attachments: HDFS-5217.000.patch, HDFS-5217.001.patch
>
>
> Currently in a secured HDFS cluster, 401 error is returned when clicking the
> "NameNode Logs" link.
> Looks like the cause of the issue is that the httpServer does not correctly
> set the security handler and the user realm currently, which causes the
> httpRequest.getRemoteUser (for the log URL) to return null and later be
> overwritten to the default web name (e.g., "dr.who") by the filter. In the
> meanwhile, in a secured cluster the log URL requires the http user to be an
> administrator. That's why we see the 401 error.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
