[
https://issues.apache.org/jira/browse/HDFS-8572?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14581646#comment-14581646
]
Haohui Mai commented on HDFS-8572:
----------------------------------
bq. Is this expected? if so, why we don't need to set securityEnabled here?
when do we need to set it?
This is expected. DN is not supposed to support SPNEGO authentication at all.
This patch is to quickly restore the old behavior before HDFS-7279 which will
unblock the release. I defer the correct fix in a separate jira.
> DN uses incorrect kerberos principals in spnego authentication
> --------------------------------------------------------------
>
> Key: HDFS-8572
> URL: https://issues.apache.org/jira/browse/HDFS-8572
> Project: Hadoop HDFS
> Issue Type: Bug
> Reporter: Haohui Mai
> Assignee: Haohui Mai
> Priority: Blocker
> Attachments: HDFS-8572.000.patch, HDFS-8572.001.patch
>
>
> After HDFS-7279, the DN always uses {{HTTP/locahost@REALM}} to authenticate
> spnego requests, which breaks all the security deployments.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)