Jan Schlicht created MESOS-9968:
-----------------------------------

             Summary: WWWAuthenticate header parsing fails when commas are in 
(quoted) realm
                 Key: MESOS-9968
                 URL: https://issues.apache.org/jira/browse/MESOS-9968
             Project: Mesos
          Issue Type: Bug
          Components: HTTP API, libprocess
            Reporter: Jan Schlicht


This was discovered when trying to launch the 
{{[nvcr.io/nvidia/tensorflow:19.08-py3|http://nvcr.io/nvidia/tensorflow:19.08-py3]}}
 image using the Mesos containerizer. This launch fails with
{noformat}
Failed to launch container: Failed to get WWW-Authenticate header: Unexpected 
auth-param format: 
'realm="https://nvcr.io/proxy_auth?scope=repository:nvidia/tensorflow:pull' in 
'realm="https://nvcr.io/proxy_auth?scope=repository:nvidia/tensorflow:pull,push";'
{noformat}
This is because the [header tokenization in 
libprocess|https://github.com/apache/mesos/blob/master/3rdparty/libprocess/src/http.cpp#L640]
 can't handle commas in quoted realm values.



--
This message was sent by Atlassian Jira
(v8.3.2#803003)

Reply via email to