[ 
https://issues.apache.org/jira/browse/AMBARI-24963?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sean Roberts updated AMBARI-24963:
----------------------------------
    Description: 
With dfs.http.policy=HTTP_AND_HTTPS the quicklinks are using http://.
They should use the stronger protocol (https://).

https://hadoop.apache.org/docs/current/hadoop-project-dist/hadoop-common/SecureMode.html#Data_Encryption_on_HTTP

Code to be improved; 
https://github.com/apache/ambari/blob/branch-2.6/ambari-server/src/main/resources/stacks/HDP/2.3/services/HDFS/quicklinks/quicklinks.json

Note: Many customers need HTTP_AND_HTTPS. HTTPS for end users and UIs, and HTTP 
for compatibility and performance with some internal tools.

  was:
With dfs.http.policy=HTTP_AND_HTTPS the quicklinks are using http://.
They should use the stronger protocol (https://).

https://hadoop.apache.org/docs/current/hadoop-project-dist/hadoop-common/SecureMode.html#Data_Encryption_on_HTTP

Note: Many customers need HTTP_AND_HTTPS. HTTPS for end users and UIs, and HTTP 
for compatibility and performance with some internal tools.


> HDFS Quicklinks should use https:// if dfs.http.policy=HTTP_AND_HTTPS
> ---------------------------------------------------------------------
>
>                 Key: AMBARI-24963
>                 URL: https://issues.apache.org/jira/browse/AMBARI-24963
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server, ambari-web
>    Affects Versions: 2.6.2
>            Reporter: Sean Roberts
>            Priority: Major
>
> With dfs.http.policy=HTTP_AND_HTTPS the quicklinks are using http://.
> They should use the stronger protocol (https://).
> https://hadoop.apache.org/docs/current/hadoop-project-dist/hadoop-common/SecureMode.html#Data_Encryption_on_HTTP
> Code to be improved; 
> https://github.com/apache/ambari/blob/branch-2.6/ambari-server/src/main/resources/stacks/HDP/2.3/services/HDFS/quicklinks/quicklinks.json
> Note: Many customers need HTTP_AND_HTTPS. HTTPS for end users and UIs, and 
> HTTP for compatibility and performance with some internal tools.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to