[ 
https://issues.apache.org/jira/browse/HDFS-5661?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13848076#comment-13848076
 ] 

Benoy Antony commented on HDFS-5661:
------------------------------------

------the client presents this DT to authenticate with DN.
This s not correct. How can DN validate and read DT ? 
The DT is issued by NN. client/agent can  authenticate using DT only with NN.

Both NN/DN use 
https://hadoop.apache.org/docs/current2/hadoop-project-dist/hadoop-common/HttpAuthentication.html
  to authenticate a user's access to their http interfaces.





> Browsing FileSystem via web ui, should use datanode's hostname instead of ip 
> address
> ------------------------------------------------------------------------------------
>
>                 Key: HDFS-5661
>                 URL: https://issues.apache.org/jira/browse/HDFS-5661
>             Project: Hadoop HDFS
>          Issue Type: Bug
>    Affects Versions: 2.2.0
>            Reporter: Benoy Antony
>            Assignee: Benoy Antony
>         Attachments: HDFS-5661.patch
>
>
> If authentication is enabled on the web ui, then a cookie is used to keep 
> track of the authentication information. There is normally a domain 
> associated with the cookie. Since ip address doesn't have any domain , the 
> cookie will not be sent by the browser while making http calls with ip 
> address as the destination server.
> This will break browsing files system via web ui , if authentication is 
> enabled.
> Browsing FileSystem via web ui, should use datanode's hostname instead of ip 
> address. 



--
This message was sent by Atlassian JIRA
(v6.1.4#6159)

Reply via email to