[
https://issues.apache.org/jira/browse/HDFS-13654?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16852585#comment-16852585
]
Hudson commented on HDFS-13654:
-------------------------------
SUCCESS: Integrated in Jenkins build Hadoop-trunk-Commit #16640 (See
[https://builds.apache.org/job/Hadoop-trunk-Commit/16640/])
HDFS-13654. Use a random secret when a secret file doesn't exist in (tasanuma:
rev 35f1014b3e10eee27f1976f4af9815a0c2d7dacd)
* (edit) hadoop-hdfs-project/hadoop-hdfs-httpfs/pom.xml
* (delete)
hadoop-hdfs-project/hadoop-hdfs-httpfs/src/main/conf/httpfs-signature.secret
* (edit)
hadoop-hdfs-project/hadoop-hdfs-httpfs/src/main/java/org/apache/hadoop/fs/http/server/HttpFSAuthenticationFilter.java
* (edit)
hadoop-hdfs-project/hadoop-hdfs-httpfs/src/main/resources/httpfs-default.xml
* (add)
hadoop-hdfs-project/hadoop-hdfs-httpfs/src/test/java/org/apache/hadoop/fs/http/server/TestHttpFSServerWebServerWithRandomSecret.java
> Use a random secret when a secret file doesn't exist in HttpFS. This should
> be default.
> ----------------------------------------------------------------------------------------
>
> Key: HDFS-13654
> URL: https://issues.apache.org/jira/browse/HDFS-13654
> Project: Hadoop HDFS
> Issue Type: Improvement
> Components: httpfs, security
> Reporter: Pulkit Bhardwaj
> Assignee: Takanobu Asanuma
> Priority: Major
> Fix For: 3.3.0
>
> Attachments: HDFS-13654.1.patch, HDFS-13654.2.patch,
> HDFS-13654.3.patch, HDFS-13654.4.patch, HDFS-13654.5.patch, HDFS-13654.6.patch
>
>
> {code:java}
> curl -s
> https://raw.githubusercontent.com/apache/hadoop/trunk/hadoop-hdfs-project/hadoop-hdfs-httpfs/src/main/conf/httpfs-signature.secret
>
> hadoop httpfs secret{code}
>
> The "secret" is a known string, it is better to keep this a random string so
> that it is not well known.
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
