[ 
https://issues.apache.org/jira/browse/HDFS-3460?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13283399#comment-13283399
 ] 

Hudson commented on HDFS-3460:
------------------------------

Integrated in Hadoop-Mapreduce-trunk #1090 (See 
[https://builds.apache.org/job/Hadoop-Mapreduce-trunk/1090/])
    HDFS-3460. HttpFS proxyuser validation with Kerberos ON uses full principal 
name. (tucu) (Revision 1342334)

     Result = ABORTED
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1342334
Files : 
* 
/hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs-httpfs/src/main/java/org/apache/hadoop/fs/http/server/HttpFSServer.java
* /hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt

                
> HttpFS proxyuser validation with Kerberos ON uses full principal name
> ---------------------------------------------------------------------
>
>                 Key: HDFS-3460
>                 URL: https://issues.apache.org/jira/browse/HDFS-3460
>             Project: Hadoop HDFS
>          Issue Type: Bug
>    Affects Versions: 2.0.0-alpha
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>            Priority: Critical
>             Fix For: 2.0.1-alpha
>
>         Attachments: HDFS-3460.patch
>
>
> The HttpFSServer.getEffectiveUser() method uses the principal name for proxy 
> user verification. If the Kerberos is ON and the proxy user is a service 
> principal (NAME/HOST) then the verification fails, instead the short name 
> (just NAME) should be used.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to