[
https://issues.apache.org/jira/browse/YARN-8258?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16502084#comment-16502084
]
Sunil Govindan commented on YARN-8258:
--------------------------------------
YARN-8108 issue is different. RMAuthenticationFilter and Spnego both are needed
for KNOX SSO and it is working for UI1 and UI2. Issue which YARN-8108 is facing
because multiple pathSpec is loaded under RMAuthenticationFilter with same
filterMapping. As per my analysis, i found pathSpec play a bigger on defining
filterMappings and this applying filters.
This Jira is solely looking on into configuring an alternative spnego via SSO
(knox) and then kerberos spnego. Both filters in tandem (in the same order)
will help to verify a user without kerberizing browser.
> YARN webappcontext for UI2 should inherit all filters from default context
> --------------------------------------------------------------------------
>
> Key: YARN-8258
> URL: https://issues.apache.org/jira/browse/YARN-8258
> Project: Hadoop YARN
> Issue Type: Bug
> Components: webapp
> Reporter: Sumana Sathish
> Assignee: Sunil Govindan
> Priority: Major
> Attachments: YARN-8258.001.patch, YARN-8258.002.patch,
> YARN-8258.003.patch, YARN-8258.004.patch, YARN-8258.005.patch,
> YARN-8258.006.patch, YARN-8258.007.patch
>
>
> Thanks [~ssath...@hortonworks.com] for finding this.
> Ideally all filters from default context has to be inherited to UI2 context
> as well.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org
