[ https://issues.apache.org/jira/browse/HADOOP-9679?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13697383#comment-13697383 ]
Alejandro Abdelnur commented on HADOOP-9679: -------------------------------------------- on the patch, setting the rules on a request is not correct. if we need to do this it should be done during initialization. The logic is a bit twisted as UGI.ensureInitialized() sets the rules only if they have not been set. The think I don't understand is in which scenario the filter would be invoked before the UGI is 'ensureInitialized()' > KerberosName.rules are not initialized during adding kerberos support to a > web servlet using hadoop authentications > ------------------------------------------------------------------------------------------------------------------- > > Key: HADOOP-9679 > URL: https://issues.apache.org/jira/browse/HADOOP-9679 > Project: Hadoop Common > Issue Type: Bug > Components: security > Affects Versions: 1.1.1, 2.0.4-alpha > Reporter: fang fang chen > Attachments: HADOOP-9679.patch > > > I am using hadoop-1.1.1 to add kerberos authentication to a web service. But > found rules are not initialized, that makes following error happened: > java.lang.NullPointerException > at > org.apache.hadoop.security.KerberosName.getShortName(KerberosName.java:384) > at > org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler$2.run(KerberosAuthenticationHandler.java:328) > at > org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler$2.run(KerberosAuthenticationHandler.java:302) > at > java.security.AccessController.doPrivileged(AccessController.java:310) > at javax.security.auth.Subject.doAs(Subject.java:573) > at > org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler.authenticate(KerberosAuthenticationHandler.java:302) > at > org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:340) > Seems in hadoop-2.0.4-alpha branch, this issue still is still there. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira