[
https://issues.apache.org/jira/browse/HADOOP-16972?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17085364#comment-17085364
]
Masatake Iwasaki commented on HADOOP-16972:
-------------------------------------------
[~eyang] Since KMS issues KMS delegation token, it uses its own
KMSAuthenticationFilter which uses KerberosDelegationTokenAuthenticationHandler
inside. The KMSAuthenticationFilter is always used since it is hardcoded in
WEB-INF/web.xml (same as httpfs). We need the same workaround as webhdfs and
httpfs for KMS too.
> Ignore AuthenticationFilterInitializer for KMSWebServer
> -------------------------------------------------------
>
> Key: HADOOP-16972
> URL: https://issues.apache.org/jira/browse/HADOOP-16972
> Project: Hadoop Common
> Issue Type: Improvement
> Components: kms
> Affects Versions: 3.3.0
> Reporter: Masatake Iwasaki
> Assignee: Masatake Iwasaki
> Priority: Major
>
> KMS does not work if hadoop.http.filter.initializers is set to
> AuthenticationFilterInitializer since KMS uses its own authentication filter.
> This is problematic when KMS is on the same node with other Hadoop services
> and shares core-site.xml with them. The filter initializers configuration
> should be tweaked as done for httpfs in HDFS-14845.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
