[
https://issues.apache.org/jira/browse/HDFS-6436?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Bangtao Zhou updated HDFS-6436:
-------------------------------
Description: while in kerberos secure mode, when using WebHdfsFileSystem to
access HDFS, it allways get an
*org.apache.hadoop.security.authentication.client.AuthenticationException:
Unauthorized*, for example, when call WebHdfsFileSystem.listStatus it will
execute a LISTSTATUS Op, and this Op should authenticate via *delegation
token*, so it will execute a GETDELEGATIONTOKEN Op to get a delegation
token(actually GETDELEGATIONTOKEN authenticate via *SPNEGO*), but it still use
delegation token to authenticate, so it allways get an Unauthorized Exception.
(was: while in kerberos secure mode, when use WebHdfsFileSystem to access HDFS,
it allways get an
*org.apache.hadoop.security.authentication.client.AuthenticationException:
Unauthorized*)
> WebHdfsFileSystem execute get, renew and cancel delegationtoken operation
> should use spnego to authenticate
> -----------------------------------------------------------------------------------------------------------
>
> Key: HDFS-6436
> URL: https://issues.apache.org/jira/browse/HDFS-6436
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: webhdfs
> Affects Versions: 3.0.0, 2.4.0
> Environment: Kerberos
> Reporter: Bangtao Zhou
> Fix For: 3.0.0
>
>
> while in kerberos secure mode, when using WebHdfsFileSystem to access HDFS,
> it allways get an
> *org.apache.hadoop.security.authentication.client.AuthenticationException:
> Unauthorized*, for example, when call WebHdfsFileSystem.listStatus it will
> execute a LISTSTATUS Op, and this Op should authenticate via *delegation
> token*, so it will execute a GETDELEGATIONTOKEN Op to get a delegation
> token(actually GETDELEGATIONTOKEN authenticate via *SPNEGO*), but it still
> use delegation token to authenticate, so it allways get an Unauthorized
> Exception.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
