[ 
https://issues.apache.org/jira/browse/MESOS-3940?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15022113#comment-15022113
 ] 

Alexander Rojas commented on MESOS-3940:
----------------------------------------

Under MESOS-3233, endpoints which require authentication will give a 
[realm|http://tools.ietf.org/html/rfc1945#section-11] when they call {{route}}. 
The handler function also differs in that it now requires an additional 
parameter of {{const Option<std::string>& principal}}. If authentication is 
turned off or no authenticators were set, the principal is {{None}}, otherwise 
it is, well, the principal.

The logic of what to do when no principal is provided is left to the handler 
itself. So I guess the ACLs should enable themselves the permissive behavior.

> /reserve and /unreserve should be permissive under a master without 
> authentication.
> -----------------------------------------------------------------------------------
>
>                 Key: MESOS-3940
>                 URL: https://issues.apache.org/jira/browse/MESOS-3940
>             Project: Mesos
>          Issue Type: Bug
>            Reporter: Michael Park
>            Assignee: Neil Conway
>              Labels: authentication, mesosphere, reservations
>
> Currently, the {{/reserve}} and {{/unreserve}} endpoints do not work without 
> authentication enabled on the master. When authentication is disabled on the 
> master, these endpoints should just be permissive.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to