smengcl opened a new pull request, #567: URL: https://github.com/apache/ozone-site/pull/567
Generated-by: Claude Code (Opus 5.5) ## What changes were proposed in this pull request? The OM and SCM web servers authenticate requests only when HTTP Kerberos (SPNEGO) is enabled, which is off by default. The admin check of the DB checkpoint endpoints needs an authenticated caller, so it is applied only with SPNEGO. This PR adds a paragraph to the "Default authentication" section of the HTTP authentication page that says so, and tells operators of a secure cluster to enable SPNEGO for OM and SCM or restrict network access to their HTTP ports. Only `docs/` (Next) is changed. The matching config descriptions and `THREAT_MODEL.md` change are in apache/ozone#11439. ## What is the link to the Apache Jira? https://issues.apache.org/jira/browse/HDDS-16759 ## How was this patch tested? Ran `markdownlint` and `cspell` on the edited page locally. The full site build is left to CI. 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
