Zita Dombi created HDDS-13344:
---------------------------------
Summary: Fix ProxyUserAuthenticationFilter addition in HttpServer2
Key: HDDS-13344
URL: https://issues.apache.org/jira/browse/HDDS-13344
Project: Apache Ozone
Issue Type: Bug
Reporter: Zita Dombi
Assignee: Zita Dombi
Now only the AuthenticationFilterInitializer is handled differently
[here|https://github.com/apache/ozone/blob/master/hadoop-hdds/framework/src/main/java/org/apache/hadoop/hdds/server/http/HttpServer2.java#L648-L655].
For AuthenticationFilterInitializer it'll call the addFilter() method which
will be working for Ozone as well, as it'll use the config prefix key from
Ozone. For the initFilter() it'll pick the config from the exact
AuthenticationFilterInitializer, e.g. for
ProxyUserAuthenticationFilterInitializer from
[here|https://github.com/apache/hadoop/blob/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/authentication/server/ProxyUserAuthenticationFilterInitializer.java#L39].
(This was there as a
[comment|https://github.com/apache/ozone/blame/d16354121d12405a1aeee2940f88512f989304ad/hadoop-hdds/framework/src/main/java/org/apache/hadoop/hdds/server/http/HttpServer2.java#L618C9-L618C9]
in Ozone as well previous the latest change around there)
ProxyUserAuthenticationFilter is used e.g. for Knox, as this filter adds
support to perform operations using end user instead of proxy user.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
