[jira] [Created] (HADOOP-10398) KerberosAuthenticator failed to fall back to PseudoAuthenticator after HADOOP-10078
Tsz Wo Nicholas Sze created HADOOP-10398:
Summary: KerberosAuthenticator failed to fall back to
PseudoAuthenticator after HADOOP-10078
Key: HADOOP-10398
URL: https://issues.apache.org/jira/browse/HADOOP-10398
Project: Hadoop Common
Issue Type: Bug
Components: security
Reporter: Tsz Wo Nicholas Sze
Assignee: Tsz Wo Nicholas Sze
{code}
//KerberosAuthenticator.java
if (conn.getResponseCode() == HttpURLConnection.HTTP_OK) {
LOG.debug(JDK performed authentication on our behalf.);
// If the JDK already did the SPNEGO back-and-forth for
// us, just pull out the token.
AuthenticatedURL.extractToken(conn, token);
return;
} else ...
{code}
The problem of the code above is that HTTP_OK does not implies authentication
completed. We should check if the token can be extracted successfully.
This problem was reported by [~bowenzhangusa] in [this
comment|https://issues.apache.org/jira/browse/HADOOP-10078?focusedCommentId=13896823page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-13896823]
earlier.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
[jira] [Created] (HADOOP-10399) FileContext API for ACLs.
Chris Nauroth created HADOOP-10399: -- Summary: FileContext API for ACLs. Key: HADOOP-10399 URL: https://issues.apache.org/jira/browse/HADOOP-10399 Project: Hadoop Common Issue Type: Sub-task Components: fs Affects Versions: 3.0.0, 2.4.0 Reporter: Chris Nauroth Assignee: Vinayakumar B Add new methods to AbstractFileSystem and FileContext for manipulating ACLs. -- This message was sent by Atlassian JIRA (v6.2#6252)
[jira] [Created] (HADOOP-10401) ShellBasedUnixGroupsMapping#getGroups does not always return primary group first
Colin Patrick McCabe created HADOOP-10401:
-
Summary: ShellBasedUnixGroupsMapping#getGroups does not always
return primary group first
Key: HADOOP-10401
URL: https://issues.apache.org/jira/browse/HADOOP-10401
Project: Hadoop Common
Issue Type: Bug
Components: util
Affects Versions: 2.4.0
Reporter: Colin Patrick McCabe
{{ShellBasedUnixGroupsMapping#getGroups}} does not always return the primary
group first. It should do this so that clients who expect it don't get the
wrong result. We should also document that the primary group is returned first
in the API. Note that {{JniBasedUnixGroupsMapping}} does return the primary
group first.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
