[ 
https://issues.apache.org/jira/browse/HDFS-5661?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13848410#comment-13848410
 ] 

Benoy Antony commented on HDFS-5661:
------------------------------------

AuthFilter.java is used only for webhdfs. While accessing JSP files, 
AuthenticationFilter is used and AuthenticationFilter  does not use 
delegationToken. 

Note that the use of IP address while generating redirectURL was introduced 
with HDFS-5307.  It used to be fqdn before.

>From the HDFS-5307 patch ,

-    String fqdn = canonicalize(chosenNode.getIpAddr());
 -    String tailUrl = "///" + fqdn + ":" + chosenNode.getInfoPort()
 +
 +    String tailUrl = "///" + JspHelper.Url.authority(req.getScheme(), 
chosenNode)

> Browsing FileSystem via web ui, should use datanode's hostname instead of ip 
> address
> ------------------------------------------------------------------------------------
>
>                 Key: HDFS-5661
>                 URL: https://issues.apache.org/jira/browse/HDFS-5661
>             Project: Hadoop HDFS
>          Issue Type: Bug
>    Affects Versions: 2.2.0
>            Reporter: Benoy Antony
>            Assignee: Benoy Antony
>         Attachments: HDFS-5661.patch
>
>
> If authentication is enabled on the web ui, then a cookie is used to keep 
> track of the authentication information. There is normally a domain 
> associated with the cookie. Since ip address doesn't have any domain , the 
> cookie will not be sent by the browser while making http calls with ip 
> address as the destination server.
> This will break browsing files system via web ui , if authentication is 
> enabled.
> Browsing FileSystem via web ui, should use datanode's hostname instead of ip 
> address. 



--
This message was sent by Atlassian JIRA
(v6.1.4#6159)

Reply via email to