[ 
https://issues.apache.org/jira/browse/HDFS-16563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17553009#comment-17553009
 ] 

fanshilun commented on HDFS-16563:
----------------------------------

causes[ MAPREDUCE-7387|https://issues.apache.org/jira/browse/MAPREDUCE-7387] 
too.

> Namenode WebUI prints sensitive information on Token Expiry
> -----------------------------------------------------------
>
>                 Key: HDFS-16563
>                 URL: https://issues.apache.org/jira/browse/HDFS-16563
>             Project: Hadoop HDFS
>          Issue Type: Bug
>          Components: namanode, security, webhdfs
>    Affects Versions: 3.3.3
>            Reporter: Renukaprasad C
>            Assignee: Renukaprasad C
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 3.4.0, 3.3.4
>
>         Attachments: image-2022-04-27-23-01-16-033.png, 
> image-2022-04-27-23-28-40-568.png
>
>          Time Spent: 3h
>  Remaining Estimate: 0h
>
> Login to Namenode WebUI.
> Wait for token to expire. (Or modify the Token refresh time 
> dfs.namenode.delegation.token.renew/update-interval to lower value)
> Refresh the WebUI after the Token expiry.
> Full token information gets printed in WebUI.
>  
> !image-2022-04-27-23-01-16-033.png!
> causes YARN-11172; all branches with this patch need that fix in too



--
This message was sent by Atlassian Jira
(v8.20.7#820007)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org

Reply via email to