[
https://issues.apache.org/jira/browse/HDFS-15765?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Pushpendra Singh updated HDFS-15765:
------------------------------------
Description:
swebhdfs's HTTP operation like get ( GetOpParam.java) operation and other HTTP
operation has 'requireAuth' set to false and expected to work with Delegation
token only. These attributes should be configurable to either use the kerberos
credentials or the delegation token.
Further swebhdfs (WebHDFSFileSystem.java) is calling 'public URLConnection
openConnection(URL url)' and providing no way to use the kerberos
authentication, if configured.
Even after setting the UserGroupInformation with user name and keytab,
openConnection is not using the keytab for authentication.
Webhdfs doesnt provide any support to read the BASIC auth password. Provide
support to read the password via environment variable.
Expected Fix : Depending upon the requireAuth for any given HTTP operation,
swebhdfs should use kerberos and instead call the function
public URLConnection openConnection(URL url, boolean isSpnego) [File :
URLConnectionFactory.java]
was:
swebhdfs's HTTP operation like get ( GetOpParam.java) operation and other HTTP
operation has 'requireAuth' set to false and expected to work with Delegation
token only. These attributes should be configurable to either use the kerberos
credentials or the delegation token.
Further swebhdfs (WebHDFSFileSystem.java) is calling 'public URLConnection
openConnection(URL url)' and providing no way to use the kerberos
authentication, if configured.
Even after setting the UserGroupInformation with user name and keytab,
openConnection is not using the keytab for authentication.
Expected Fix : Depending upon the requireAuth for any given HTTP operation,
swebhdfs should use kerberos and instead call the function
public URLConnection openConnection(URL url, boolean isSpnego) [File :
URLConnectionFactory.java]
> Add support for Kerberos and Basic Auth in webhdfs
> --------------------------------------------------
>
> Key: HDFS-15765
> URL: https://issues.apache.org/jira/browse/HDFS-15765
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: hadoop-client
> Reporter: Pushpendra Singh
> Priority: Minor
>
> swebhdfs's HTTP operation like get ( GetOpParam.java) operation and other
> HTTP operation has 'requireAuth' set to false and expected to work with
> Delegation token only. These attributes should be configurable to either use
> the kerberos credentials or the delegation token.
> Further swebhdfs (WebHDFSFileSystem.java) is calling 'public URLConnection
> openConnection(URL url)' and providing no way to use the kerberos
> authentication, if configured.
> Even after setting the UserGroupInformation with user name and keytab,
> openConnection is not using the keytab for authentication.
> Webhdfs doesnt provide any support to read the BASIC auth password. Provide
> support to read the password via environment variable.
> Expected Fix : Depending upon the requireAuth for any given HTTP operation,
> swebhdfs should use kerberos and instead call the function
> public URLConnection openConnection(URL url, boolean isSpnego) [File :
> URLConnectionFactory.java]
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
