[
https://issues.apache.org/jira/browse/HADOOP-11704?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14359963#comment-14359963
]
Anubhav Dhoot commented on HADOOP-11704:
----------------------------------------
I think the logic is sound, as it normalize the configured
ipaddress/hostname/cidr to ipaddress and then expects ipaddress to be passed
in. Otherwise supporting both hostname and ipaddress to be passed in can be
challenging. I can add a warning if the input is not an ipaddress to catch
existing bugs like this.
> ProxyUsers expects ipaddress due to MachineList but callers send in remote
> host
> --------------------------------------------------------------------------------
>
> Key: HADOOP-11704
> URL: https://issues.apache.org/jira/browse/HADOOP-11704
> Project: Hadoop Common
> Issue Type: Bug
> Reporter: Anubhav Dhoot
> Assignee: Anubhav Dhoot
> Attachments: HADOOP-11704.001.patch
>
>
> DelegationTokenAuthenticationHandler and DelegationTokenAuthenticationFilter
> are using ServletRequest#getRemoteHost which can send an address if possible.
> It should use getRemoteAddr instead
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
