[
https://issues.apache.org/jira/browse/MESOS-9968?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17045760#comment-17045760
]
Andrei Sekretenko commented on MESOS-9968:
------------------------------------------
Backported into 1.7 due to the need to backport MESOS-10092 into 1.7:
{noformat}
commit 38c292862cfe0911ddab0b8119380df97b4b465c
Author: Benjamin Bannier <[email protected]>
Date: Mon Sep 23 10:24:50 2019 +0200
Fixed parsing of HTTP authentication headers.
This patch adds support for quoted strings in `Www-Authenticate` headers
and allows to use spaces when delimiting authentication attributes of
the form `WWW-Autenticate: a=b, c=d`, both of with are allowed by
RFC2617.
Review: https://reviews.apache.org/r/71534
commit 580056b307b6bfdb8ddabc9dfe4302196f38df54
Author: Benjamin Bannier <[email protected]>
Date: Mon Sep 23 10:23:27 2019 +0200
Cleaned up `HTTPTest.WWWAuthenticateHeader`.
This patch removes a number of error-prone temporaries previously reused
in the test.
Review: https://reviews.apache.org/r/71533
{noformat}
> WWWAuthenticate header parsing fails when commas are in (quoted) realm
> ----------------------------------------------------------------------
>
> Key: MESOS-9968
> URL: https://issues.apache.org/jira/browse/MESOS-9968
> Project: Mesos
> Issue Type: Bug
> Components: HTTP API, libprocess
> Reporter: Jan Schlicht
> Assignee: Benjamin Bannier
> Priority: Major
> Fix For: 1.8.2, 1.9.1, 1.10.0
>
>
> This was discovered when trying to launch the
> {{[nvcr.io/nvidia/tensorflow:19.08-py3|http://nvcr.io/nvidia/tensorflow:19.08-py3]}}
> image using the Mesos containerizer. This launch fails with
> {noformat}
> Failed to launch container: Failed to get WWW-Authenticate header: Unexpected
> auth-param format:
> 'realm="https://nvcr.io/proxy_auth?scope=repository:nvidia/tensorflow:pull'
> in
> 'realm="https://nvcr.io/proxy_auth?scope=repository:nvidia/tensorflow:pull,push";'
> {noformat}
> This is because the [header tokenization in
> libprocess|https://github.com/apache/mesos/blob/master/3rdparty/libprocess/src/http.cpp#L640]
> can't handle commas in quoted realm values.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
