[ 
https://issues.apache.org/jira/browse/HDFS-5661?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Benoy Antony updated HDFS-5661:
-------------------------------

    Attachment: HDFS-5661.patch

Had a discussion with Mai, Jing and Suresh. 

The decision was to switch back to using fqdn instead of using ip address or 
using the hostname passed during DN registration. This will retain the previous 
behavior. 

As a side note, customers might use custom AuthenticationHandlers  other than 
Kerberos (SpNego) . These custom AuthenticationHandlers could potentially use 
cookies to share auth information across servers (namenode and datanodes) . 
Usage of ip address will prevent sharing information using cookies .  This 
includes cookies used by custom AuthenticationHandlers or hadoop.auth cookie.



> Browsing FileSystem via web ui, should use datanode's hostname instead of ip 
> address
> ------------------------------------------------------------------------------------
>
>                 Key: HDFS-5661
>                 URL: https://issues.apache.org/jira/browse/HDFS-5661
>             Project: Hadoop HDFS
>          Issue Type: Bug
>    Affects Versions: 2.2.0
>            Reporter: Benoy Antony
>            Assignee: Benoy Antony
>         Attachments: HDFS-5661.patch, HDFS-5661.patch
>
>
> If authentication is enabled on the web ui, then a cookie is used to keep 
> track of the authentication information. There is normally a domain 
> associated with the cookie. Since ip address doesn't have any domain , the 
> cookie will not be sent by the browser while making http calls with ip 
> address as the destination server.
> This will break browsing files system via web ui , if authentication is 
> enabled.
> Browsing FileSystem via web ui, should use datanode's hostname instead of ip 
> address. 



--
This message was sent by Atlassian JIRA
(v6.1.4#6159)

Reply via email to