[
https://issues.apache.org/jira/browse/HDFS-5263?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13783109#comment-13783109
]
Daryn Sharp commented on HDFS-5263:
-----------------------------------
Looks good with a cursory glance, but I'm a bit concerned about storing the
token in the instance. Is that necessary?
> Delegation token is not created generateNodeDataHeader method of
> NamenodeJspHelper$NodeListJsp
> ----------------------------------------------------------------------------------------------
>
> Key: HDFS-5263
> URL: https://issues.apache.org/jira/browse/HDFS-5263
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: namenode, webhdfs
> Reporter: Vasu Mariyala
> Attachments: HDFS-5263.patch
>
>
> When Kerberos authentication is enabled, we are unable to browse to the data
> nodes using ( Name node web page --> Live Nodes --> Select any of the data
> nodes). The reason behind this is the delegation token is not provided as
> part of the url in the method (generateNodeDataHeader method of NodeListJsp)
> {code}
> String url = HttpConfig.getSchemePrefix() + d.getHostName() + ":"
> + d.getInfoPort()
> + "/browseDirectory.jsp?namenodeInfoPort=" + nnHttpPort + "&dir="
> + URLEncoder.encode("/", "UTF-8")
> + JspHelper.getUrlParam(JspHelper.NAMENODE_ADDRESS, nnaddr);
> {code}
> But browsing the file system using name node web page --> Browse the file
> system -> <any directory> is working fine as the redirectToRandomDataNode
> method of NamenodeJspHelper creates the delegation token
> {code}
> redirectLocation = HttpConfig.getSchemePrefix() + fqdn + ":" +
> redirectPort
> + "/browseDirectory.jsp?namenodeInfoPort="
> + nn.getHttpAddress().getPort() + "&dir=/"
> + (tokenString == null ? "" :
> JspHelper.getDelegationTokenUrlParam(tokenString))
> + JspHelper.getUrlParam(JspHelper.NAMENODE_ADDRESS, addr);
> {code}
> I will work on providing a patch for this issue.
--
This message was sent by Atlassian JIRA
(v6.1#6144)
