Sowmya Ramesh created FALCON-1943:
-------------------------------------
Summary: Extension API/CLI fails when authorization is enabled
Key: FALCON-1943
URL: https://issues.apache.org/jira/browse/FALCON-1943
Project: Falcon
Issue Type: Bug
Reporter: Sowmya Ramesh
Assignee: Sowmya Ramesh
Extension REST API's fail with Authorization failed : 400/Illegal resource
{noformat}
2016-05-06 00:42:59,616 INFO - [main:] ~ Generated
unique-instance-id=ac165f6421108-os-r6-mhblfu-falcon-3-31
(GraphDatabaseConfiguration:1469)
2016-05-06 00:42:59,660 INFO - [main:] ~ Initiated backend operations thread
pool of size 4 (Backend:168)
2016-05-06 00:42:59,744 INFO - [main:] ~ Loaded unidentified ReadMarker start
time Timepoint[1462495379743000 μs] into
com.thinkaurelius.titan.diskstorage.log.kcvs.KCVSLog$MessagePuller@3520a0d7
(KCVSLog:733)
2016-05-06 00:42:59,947 INFO - [main:] ~ Indexes already exist for graph
(MetadataMappingService:148)
2016-05-06 00:42:59,948 INFO - [main:] ~ Initialized graph db:
titangraph[berkeleyje:/hadoop/falcon/data/lineage/graphdb]
(MetadataMappingService:93)
2016-05-06 00:42:59,950 INFO - [main:] ~ Init vertex property keys: [name,
type, version, timestamp] (MetadataMappingService:96)
2016-05-06 00:42:59,953 INFO - [main:] ~ Init edge property keys: [name, type,
version, timestamp] (MetadataMappingService:99)
2016-05-06 00:42:59,958 INFO - [main:] ~ Service initialized:
org.apache.falcon.metadata.MetadataMappingService (ServiceInitializer:52)
2016-05-06 00:42:59,961 INFO - [main:] ~ FalconAuditFilter initialization
started (FalconAuditFilter:49)
2016-05-06 00:42:59,965 INFO - [main:] ~ FalconAuthenticationFilter
initialization started (FalconAuthenticationFilter:83)
2016-05-06 00:42:59,985 INFO - [main:] ~ Falcon is running with authorization
enabled (FalconAuthorizationFilter:62)
2016-05-06 00:43:01,623 INFO - [main:] ~ Started [email protected]:15000
(log:67)
2016-05-06 00:43:08,832 INFO - [1706292388@qtp-1610702581-0 -
88ba0bf7-2300-48a5-92a7-fede4775b523:] ~ HttpServletRequest RemoteUser is null
(Servlets:47)
2016-05-06 00:43:08,836 INFO - [1706292388@qtp-1610702581-0 -
88ba0bf7-2300-48a5-92a7-fede4775b523:] ~ HttpServletRequest user.name param
value is falcon (Servlets:53)
2016-05-06 00:43:08,838 DEBUG - [1706292388@qtp-1610702581-0 -
88ba0bf7-2300-48a5-92a7-fede4775b523:] ~ Audit: falcon/172.22.95.100 performed
request
http://os-r6-mhblfu-falcon-3-3.openstacklocal:15000/api/options?user.name=falcon
(172.22.95.100) at time 2016-05-06T00:43Z (FalconAuditFilter:86)
2016-05-06 00:43:08,875 INFO - [1706292388@qtp-1610702581-0 -
ba3e5632-1457-415e-bdd4-4a81d31c4f70:] ~ HttpServletRequest RemoteUser is null
(Servlets:47)
2016-05-06 00:43:08,876 INFO - [1706292388@qtp-1610702581-0 -
ba3e5632-1457-415e-bdd4-4a81d31c4f70:] ~ HttpServletRequest user.name param
value is falcon (Servlets:53)
2016-05-06 00:43:08,876 DEBUG - [1706292388@qtp-1610702581-0 -
ba3e5632-1457-415e-bdd4-4a81d31c4f70:] ~ Audit: falcon/172.22.95.100 performed
request
http://os-r6-mhblfu-falcon-3-3.openstacklocal:15000/api/options?user.name=falcon&user.name=falcon
(172.22.95.100) at time 2016-05-06T00:43Z (FalconAuditFilter:86)
2016-05-06 00:43:08,917 INFO - [1706292388@qtp-1610702581-0 -
87cabbc5-87d9-45d3-aac8-5620c7cee207:] ~ HttpServletRequest RemoteUser is
falcon (Servlets:47)
2016-05-06 00:43:08,919 INFO - [1706292388@qtp-1610702581-0 -
87cabbc5-87d9-45d3-aac8-5620c7cee207:falcon:GET//extension/enumerate/] ~
Logging in falcon (CurrentUser:65)
2016-05-06 00:43:08,919 INFO - [1706292388@qtp-1610702581-0 -
87cabbc5-87d9-45d3-aac8-5620c7cee207:falcon:GET//extension/enumerate/] ~
Request from authenticated user: falcon, URL=/api/extension/enumerate/, doAs
user: null (FalconAuthenticationFilter:185)
2016-05-06 00:43:08,921 INFO - [1706292388@qtp-1610702581-0 -
87cabbc5-87d9-45d3-aac8-5620c7cee207:falcon:GET//extension/enumerate/] ~
Authorizing user=falcon against request=RequestParts{resource='extension',
action='enumerate'} (FalconAuthorizationFilter:78)
2016-05-06 00:43:08,922 ERROR - [1706292388@qtp-1610702581-0 -
87cabbc5-87d9-45d3-aac8-5620c7cee207:falcon:GET//extension/enumerate/] ~
Authorization failed : 400/Illegal resource: extension
(FalconAuthorizationFilter:155)
2016-05-06 00:43:08,931 DEBUG - [1706292388@qtp-1610702581-0 -
87cabbc5-87d9-45d3-aac8-5620c7cee207:] ~ Audit: falcon/172.22.95.100 performed
request
http://os-r6-mhblfu-falcon-3-3.openstacklocal:15000/api/extension/enumerate/
(172.22.95.100) at time 2016-05-06T00:43Z (FalconAuditFilter:86)
{noformat}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
