Larry McCay created KNOX-303:
--------------------------------
Summary: Handle Invalid SLA ACL Configuration
Key: KNOX-303
URL: https://issues.apache.org/jira/browse/KNOX-303
Project: Apache Knox
Issue Type: Bug
Components: Server
Reporter: Larry McCay
1. Indexoutof bounds
when ACL value is
<param>
<name>webhdfs.acl</name>
<value>guest</value>
</param>
at
org.apache.hadoop.gateway.filter.AclsAuthorizationFilter.parseGroupAcls(AclsAuthorizationFilter.java:120)
at
org.apache.hadoop.gateway.filter.AclsAuthorizationFilter.parseAcls(AclsAuthorizationFilter.java:98)
at
org.apache.hadoop.gateway.filter.AclsAuthorizationFilter.init(AclsAuthorizationFilter.java:77)
at
org.apache.hadoop.gateway.GatewayFilter$Holder.getInstance(GatewayFilter.java:341)
at
org.apache.hadoop.gateway.GatewayFilter$Holder.doFilter(GatewayFilter.java:311)
at
org.apache.hadoop.gateway.GatewayFilter$Chain.doFilter(GatewayFilter.java:212)
at
org.apache.hadoop.gateway.filter.security.AbstractIdentityAssertionFilter.doFilterInternal(AbstractIdentityAssertionFilter.java:209)
at
org.apache.hadoop.gateway.filter.security.AbstractIdentityAssertionFilter.continueChainAsPrincipal(AbstractIdentityAssertionFilter.java:157)
at
org.apache.hadoop.gateway.identityasserter.filter.IdentityAsserterFilter.doFilter(IdentityAsserterFilter.java:55)
1. Leads to Null pointer when value =
<param>
<name>webhdfs.acl</name>
<value>guest;;</value>
</param>
Server Error</pre></p><h3>Caused
by:</h3><pre>org.apache.shiro.subject.ExecutionException:
java.security.PrivilegedActionException: javax.servlet.ServletException:
java.lang.NullPointerException
at
org.apache.shiro.subject.support.DelegatingSubject.execute(DelegatingSubject.java:385)
at
org.apache.hadoop.gateway.filter.ShiroSubjectIdentityAdapter.doFilter(ShiroSubjectIdentityAdapter.java:74)
at
org.apache.hadoop.gateway.GatewayFilter$Holder.doFilter(GatewayFilter.java:311)
at
org.apache.hadoop.gateway.GatewayFilter$Chain.doFilter(GatewayFilter.java:212)
at
org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:61)
at org.apache.shiro.web.servlet.AdviceFilter.executeChain(AdviceFilter.java:108)
--
This message was sent by Atlassian JIRA
(v6.2#6252)
