[
https://issues.apache.org/jira/browse/HDFS-9064?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14906334#comment-14906334
]
Kanaka Kumar Avvaru commented on HDFS-9064:
-------------------------------------------
I would like to correct my previous analysis with following observations.
1) I have observed {{block_info_xml.jsp}} is accessible with out SPNEGO
authentication in 2.6.0 even in Secure mode ON.
2) Alternatively URL like {{nnip:port/fsck?blockId=blk_xxxx}} (SPNEGO
authentication is required) also available inplace of {{block_info_xml.jsp}}
from remote clients though some information like owner & permission details
are not available in the response (alternatively one can use webhdfs REST API
for such details).
I think it is security breach proving {{block_info_xml}} and so it was removed.
Let's get confirmation from implementors of HDFS-6252 here.
[~wheat9], Can you give your opinion on this JIRA and also shall we add
GETBLOCKINFO in webhdfs for all the details provided by {{block_info_xml.jsp}} ?
> NN old UI (block_info_xml) not available in 2.7.x
> -------------------------------------------------
>
> Key: HDFS-9064
> URL: https://issues.apache.org/jira/browse/HDFS-9064
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: HDFS
> Affects Versions: 2.7.0
> Reporter: Rushabh S Shah
> Assignee: Kanaka Kumar Avvaru
> Priority: Critical
>
> In 2.6.x hadoop deploys, given a blockId it was very easy to find out the
> file name and the locations of replicas (also whether they are corrupt or
> not).
> This was the REST call:
> {noformat}
> http://<nnAddress>:<port#>/block_info_xml.jsp?blockId=xxx
> {noformat}
> But this was removed by HDFS-6252 in 2.7 builds.
> Creating this jira to restore that functionality.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
