[
https://issues.apache.org/jira/browse/HADOOP-8043?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13205716#comment-13205716
]
Alejandro Abdelnur commented on HADOOP-8043:
--------------------------------------------
I'm still of the opinion that you'd have the race condition as you could have
the first 2 incoming requests at the same time.
I would not do the host resolution for initialization using the hostname that
you get from *request.getServerName()* because this is the exact hostname
caller used in the URL and this could be an IP, just the hostname, the hostname
+ domain, a DNS alias. What we should do is the same that Hadoop is doing to
resolve the wildcard '_HOST' if set in the principal.
The later is something that should be addressed in trunk as well.
> KerberosAuthenticationFilter and friends have some problems
> -----------------------------------------------------------
>
> Key: HADOOP-8043
> URL: https://issues.apache.org/jira/browse/HADOOP-8043
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 1.0.0
> Reporter: Allen Wittenauer
> Priority: Critical
> Attachments: HADOOP-8043-branch-1.0.txt
>
>
> KerberosAuthenticationFilter and friends have three killer usability issues
> and bugs:
> 1. Documentation is misleading/wrong.
> 2. Shared secret stored in a world readable file.
> 3. Lacks support for _HOST macro
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
