[
https://issues.apache.org/jira/browse/HDFS-3305?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Aaron T. Myers updated HDFS-3305:
---------------------------------
Attachment: HDFS-3305.patch
Here's a patch which addresses the issue. In GetImageServlet#isValidRequestor,
we now check to see if HA is configured for this nameservice and add the
principal of the other NN as a valid requestor if HA is configured.
In addition to the test provided, I also tested this manually with a pair of
secure, HA-enabled NNs.
> GetImageServlet should considered SBN a valid requestor in a secure HA setup
> ----------------------------------------------------------------------------
>
> Key: HDFS-3305
> URL: https://issues.apache.org/jira/browse/HDFS-3305
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: ha, name-node
> Affects Versions: 2.0.0
> Reporter: Aaron T. Myers
> Assignee: Aaron T. Myers
> Attachments: HDFS-3305.patch
>
>
> Right now only the NN and 2NN are considered valid requestors. This won't
> work if the ANN and SBN use distinct principal names.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
