[
https://issues.apache.org/jira/browse/HDFS-8572?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14582036#comment-14582036
]
Yongjun Zhang commented on HDFS-8572:
-------------------------------------
Hi [~wheat9],
Thanks for the new rev to address my comment.
{quote}
Is this expected? if so, why we don't need to set securityEnabled here? when do
we need to set it?
This is expected. DN is not supposed to support SPNEGO authentication at all.
This patch is to quickly restore the old behavior before HDFS-7279 which will
unblock the release. I defer the correct fix in a separate jira.
{quote}
I can see that your change restored old behavior and I agree that we can defer
any other fixes to separate jira. So I agree with rev 002 solution here. Two
comments:
- Based on your explanation, the jira title here may not be accurate. Would you
please update it if so?
- Would you please create new jira with some description of the correct fix you
referred to?
BTW, we have a similar case that we hope can get a fix and defer other issues
to separate jiras. [~atm] had a long standing comment here
https://issues.apache.org/jira/browse/HDFS-7037?focusedCommentId=14484301&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-14484301
waiting for you to reply. We keep having use issues without the fix even as of
yesterdaty. Would you please kindly revisit and reply to [~atm]'s comment?
Thanks much.
> DN uses incorrect kerberos principals in spnego authentication
> --------------------------------------------------------------
>
> Key: HDFS-8572
> URL: https://issues.apache.org/jira/browse/HDFS-8572
> Project: Hadoop HDFS
> Issue Type: Bug
> Reporter: Haohui Mai
> Assignee: Haohui Mai
> Priority: Blocker
> Attachments: HDFS-8572.000.patch, HDFS-8572.001.patch,
> HDFS-8572.002.patch
>
>
> After HDFS-7279, the DN always uses {{HTTP/locahost@REALM}} to authenticate
> spnego requests, which breaks all the security deployments.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
