[ 
https://issues.apache.org/jira/browse/HDDS-13344?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Zita Dombi updated HDDS-13344:
------------------------------
    Fix Version/s: 2.1.0
                       (was: 2.2.0)

> Fix ProxyUserAuthenticationFilter addition in HttpServer2
> ---------------------------------------------------------
>
>                 Key: HDDS-13344
>                 URL: https://issues.apache.org/jira/browse/HDDS-13344
>             Project: Apache Ozone
>          Issue Type: Bug
>            Reporter: Zita Dombi
>            Assignee: Zita Dombi
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 2.1.0
>
>
> Now only the AuthenticationFilterInitializer is handled differently 
> [here|https://github.com/apache/ozone/blob/master/hadoop-hdds/framework/src/main/java/org/apache/hadoop/hdds/server/http/HttpServer2.java#L648-L655].
>  For AuthenticationFilterInitializer it'll call the addFilter() method which 
> will be working for Ozone as well, as it'll use the config prefix key from 
> Ozone. For the initFilter() it'll pick the config from the exact 
> AuthenticationFilterInitializer, e.g. for 
> ProxyUserAuthenticationFilterInitializer from 
> [here|https://github.com/apache/hadoop/blob/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/authentication/server/ProxyUserAuthenticationFilterInitializer.java#L39].
>  (This was there as a 
> [comment|https://github.com/apache/ozone/blame/d16354121d12405a1aeee2940f88512f989304ad/hadoop-hdds/framework/src/main/java/org/apache/hadoop/hdds/server/http/HttpServer2.java#L618C9-L618C9]
>  in Ozone as well previous the latest change around there)
> ProxyUserAuthenticationFilter is used e.g. for Knox, as this filter adds 
> support to perform operations using end user instead of proxy user. 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to