You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Alejandro Abdelnur (Created) (JIRA)" <ji...@apache.org> on 2012/02/21 19:49:46 UTC

[jira] [Created] (HADOOP-8098) KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name
-----------------------------------------------------------------------------------

                 Key: HADOOP-8098
                 URL: https://issues.apache.org/jira/browse/HADOOP-8098
             Project: Hadoop Common
          Issue Type: Improvement
          Components: security
    Affects Versions: 0.24.0, 0.23.2
            Reporter: Alejandro Abdelnur
            Assignee: Alejandro Abdelnur
             Fix For: 0.23.2


Currently the exact Kerberos principal name has to be set in the configuration of each node.

KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (HADOOP-8098) KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

Posted by "Alejandro Abdelnur (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/HADOOP-8098?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alejandro Abdelnur updated HADOOP-8098:
---------------------------------------

    Status: Patch Available  (was: Open)
    
> KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name
> -----------------------------------------------------------------------------------
>
>                 Key: HADOOP-8098
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8098
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.24.0, 0.23.2
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.23.2
>
>         Attachments: HADOOP-8098.patch
>
>
> Currently the exact Kerberos principal name has to be set in the configuration of each node.
> KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HADOOP-8098) KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HADOOP-8098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13218482#comment-13218482 ] 

Hudson commented on HADOOP-8098:
--------------------------------

Integrated in Hadoop-Hdfs-0.23-Commit #597 (See [https://builds.apache.org/job/Hadoop-Hdfs-0.23-Commit/597/])
    Merge -r 1294756:1294757 from trunk to branch. FIXES: HADOOP-8098 (Revision 1294775)

     Result = SUCCESS
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1294775
Files : 
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/docs/src/documentation/content/xdocs/HttpAuthentication.xml
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/http/HttpServer.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/AuthenticationFilterInitializer.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/security/TestAuthenticationFilter.java

                
> KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name
> -----------------------------------------------------------------------------------
>
>                 Key: HADOOP-8098
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8098
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.24.0, 0.23.2
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.23.3
>
>         Attachments: HADOOP-8098.patch
>
>
> Currently the exact Kerberos principal name has to be set in the configuration of each node.
> KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HADOOP-8098) KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HADOOP-8098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13218442#comment-13218442 ] 

Hudson commented on HADOOP-8098:
--------------------------------

Integrated in Hadoop-Common-trunk-Commit #1796 (See [https://builds.apache.org/job/Hadoop-Common-trunk-Commit/1796/])
    HADOOP-8098. KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name (tucu) (Revision 1294757)

     Result = SUCCESS
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1294757
Files : 
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/docs/src/documentation/content/xdocs/HttpAuthentication.xml
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/http/HttpServer.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/AuthenticationFilterInitializer.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/security/TestAuthenticationFilter.java

                
> KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name
> -----------------------------------------------------------------------------------
>
>                 Key: HADOOP-8098
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8098
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.24.0, 0.23.2
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.23.2
>
>         Attachments: HADOOP-8098.patch
>
>
> Currently the exact Kerberos principal name has to be set in the configuration of each node.
> KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HADOOP-8098) KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HADOOP-8098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13219187#comment-13219187 ] 

Hudson commented on HADOOP-8098:
--------------------------------

Integrated in Hadoop-Mapreduce-0.23-Build #211 (See [https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Build/211/])
    Merge -r 1294756:1294757 from trunk to branch. FIXES: HADOOP-8098 (Revision 1294775)

     Result = FAILURE
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1294775
Files : 
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/docs/src/documentation/content/xdocs/HttpAuthentication.xml
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/http/HttpServer.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/AuthenticationFilterInitializer.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/security/TestAuthenticationFilter.java

                
> KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name
> -----------------------------------------------------------------------------------
>
>                 Key: HADOOP-8098
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8098
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.24.0, 0.23.2
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.23.3
>
>         Attachments: HADOOP-8098.patch
>
>
> Currently the exact Kerberos principal name has to be set in the configuration of each node.
> KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HADOOP-8098) KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HADOOP-8098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13218473#comment-13218473 ] 

Hudson commented on HADOOP-8098:
--------------------------------

Integrated in Hadoop-Common-0.23-Commit #609 (See [https://builds.apache.org/job/Hadoop-Common-0.23-Commit/609/])
    Merge -r 1294756:1294757 from trunk to branch. FIXES: HADOOP-8098 (Revision 1294775)

     Result = SUCCESS
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1294775
Files : 
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/docs/src/documentation/content/xdocs/HttpAuthentication.xml
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/http/HttpServer.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/AuthenticationFilterInitializer.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/security/TestAuthenticationFilter.java

                
> KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name
> -----------------------------------------------------------------------------------
>
>                 Key: HADOOP-8098
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8098
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.24.0, 0.23.2
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.23.3
>
>         Attachments: HADOOP-8098.patch
>
>
> Currently the exact Kerberos principal name has to be set in the configuration of each node.
> KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HADOOP-8098) KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

Posted by "Tom White (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HADOOP-8098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13218419#comment-13218419 ] 

Tom White commented on HADOOP-8098:
-----------------------------------

+1
                
> KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name
> -----------------------------------------------------------------------------------
>
>                 Key: HADOOP-8098
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8098
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.24.0, 0.23.2
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.23.2
>
>         Attachments: HADOOP-8098.patch
>
>
> Currently the exact Kerberos principal name has to be set in the configuration of each node.
> KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HADOOP-8098) KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HADOOP-8098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13219167#comment-13219167 ] 

Hudson commented on HADOOP-8098:
--------------------------------

Integrated in Hadoop-Hdfs-0.23-Build #183 (See [https://builds.apache.org/job/Hadoop-Hdfs-0.23-Build/183/])
    Merge -r 1294756:1294757 from trunk to branch. FIXES: HADOOP-8098 (Revision 1294775)

     Result = FAILURE
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1294775
Files : 
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/docs/src/documentation/content/xdocs/HttpAuthentication.xml
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/http/HttpServer.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/AuthenticationFilterInitializer.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/security/TestAuthenticationFilter.java

                
> KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name
> -----------------------------------------------------------------------------------
>
>                 Key: HADOOP-8098
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8098
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.24.0, 0.23.2
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.23.3
>
>         Attachments: HADOOP-8098.patch
>
>
> Currently the exact Kerberos principal name has to be set in the configuration of each node.
> KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HADOOP-8098) KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

Posted by "Hadoop QA (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HADOOP-8098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13218424#comment-13218424 ] 

Hadoop QA commented on HADOOP-8098:
-----------------------------------

-1 overall.  Here are the results of testing the latest attachment 
  http://issues.apache.org/jira/secure/attachment/12516360/HADOOP-8098.patch
  against trunk revision .

    +1 @author.  The patch does not contain any @author tags.

    +1 tests included.  The patch appears to include 3 new or modified tests.

    +1 javadoc.  The javadoc tool did not generate any warning messages.

    +1 javac.  The applied patch does not increase the total number of javac compiler warnings.

    +1 eclipse:eclipse.  The patch built with eclipse:eclipse.

    +1 findbugs.  The patch does not introduce any new Findbugs (version 1.3.9) warnings.

    +1 release audit.  The applied patch does not increase the total number of release audit warnings.

    -1 core tests.  The patch failed these unit tests:
                  org.apache.hadoop.fs.viewfs.TestViewFsTrash

    +1 contrib tests.  The patch passed contrib unit tests.

Test results: https://builds.apache.org/job/PreCommit-HADOOP-Build/637//testReport/
Console output: https://builds.apache.org/job/PreCommit-HADOOP-Build/637//console

This message is automatically generated.
                
> KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name
> -----------------------------------------------------------------------------------
>
>                 Key: HADOOP-8098
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8098
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.24.0, 0.23.2
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.23.2
>
>         Attachments: HADOOP-8098.patch
>
>
> Currently the exact Kerberos principal name has to be set in the configuration of each node.
> KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HADOOP-8098) KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HADOOP-8098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13219217#comment-13219217 ] 

Hudson commented on HADOOP-8098:
--------------------------------

Integrated in Hadoop-Mapreduce-trunk #1005 (See [https://builds.apache.org/job/Hadoop-Mapreduce-trunk/1005/])
    HADOOP-8098. KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name (tucu) (Revision 1294757)

     Result = SUCCESS
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1294757
Files : 
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/docs/src/documentation/content/xdocs/HttpAuthentication.xml
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/http/HttpServer.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/AuthenticationFilterInitializer.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/security/TestAuthenticationFilter.java

                
> KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name
> -----------------------------------------------------------------------------------
>
>                 Key: HADOOP-8098
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8098
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.24.0, 0.23.2
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.23.3
>
>         Attachments: HADOOP-8098.patch
>
>
> Currently the exact Kerberos principal name has to be set in the configuration of each node.
> KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HADOOP-8098) KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HADOOP-8098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13219150#comment-13219150 ] 

Hudson commented on HADOOP-8098:
--------------------------------

Integrated in Hadoop-Hdfs-trunk #970 (See [https://builds.apache.org/job/Hadoop-Hdfs-trunk/970/])
    HADOOP-8098. KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name (tucu) (Revision 1294757)

     Result = SUCCESS
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1294757
Files : 
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/docs/src/documentation/content/xdocs/HttpAuthentication.xml
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/http/HttpServer.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/AuthenticationFilterInitializer.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/security/TestAuthenticationFilter.java

                
> KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name
> -----------------------------------------------------------------------------------
>
>                 Key: HADOOP-8098
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8098
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.24.0, 0.23.2
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.23.3
>
>         Attachments: HADOOP-8098.patch
>
>
> Currently the exact Kerberos principal name has to be set in the configuration of each node.
> KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (HADOOP-8098) KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

Posted by "Alejandro Abdelnur (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/HADOOP-8098?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alejandro Abdelnur updated HADOOP-8098:
---------------------------------------

       Resolution: Fixed
    Fix Version/s:     (was: 0.23.2)
                   0.23.3
     Hadoop Flags: Reviewed
           Status: Resolved  (was: Patch Available)

committed to trunk and branch-0.23
                
> KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name
> -----------------------------------------------------------------------------------
>
>                 Key: HADOOP-8098
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8098
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.24.0, 0.23.2
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.23.3
>
>         Attachments: HADOOP-8098.patch
>
>
> Currently the exact Kerberos principal name has to be set in the configuration of each node.
> KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HADOOP-8098) KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HADOOP-8098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13218513#comment-13218513 ] 

Hudson commented on HADOOP-8098:
--------------------------------

Integrated in Hadoop-Mapreduce-trunk-Commit #1805 (See [https://builds.apache.org/job/Hadoop-Mapreduce-trunk-Commit/1805/])
    HADOOP-8098. KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name (tucu) (Revision 1294757)

     Result = ABORTED
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1294757
Files : 
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/docs/src/documentation/content/xdocs/HttpAuthentication.xml
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/http/HttpServer.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/AuthenticationFilterInitializer.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/security/TestAuthenticationFilter.java

                
> KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name
> -----------------------------------------------------------------------------------
>
>                 Key: HADOOP-8098
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8098
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.24.0, 0.23.2
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.23.3
>
>         Attachments: HADOOP-8098.patch
>
>
> Currently the exact Kerberos principal name has to be set in the configuration of each node.
> KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HADOOP-8098) KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HADOOP-8098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13218557#comment-13218557 ] 

Hudson commented on HADOOP-8098:
--------------------------------

Integrated in Hadoop-Mapreduce-0.23-Commit #610 (See [https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Commit/610/])
    Merge -r 1294756:1294757 from trunk to branch. FIXES: HADOOP-8098 (Revision 1294775)

     Result = ABORTED
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1294775
Files : 
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/docs/src/documentation/content/xdocs/HttpAuthentication.xml
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/http/HttpServer.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/AuthenticationFilterInitializer.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/security/TestAuthenticationFilter.java

                
> KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name
> -----------------------------------------------------------------------------------
>
>                 Key: HADOOP-8098
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8098
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.24.0, 0.23.2
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.23.3
>
>         Attachments: HADOOP-8098.patch
>
>
> Currently the exact Kerberos principal name has to be set in the configuration of each node.
> KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HADOOP-8098) KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HADOOP-8098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13218451#comment-13218451 ] 

Hudson commented on HADOOP-8098:
--------------------------------

Integrated in Hadoop-Hdfs-trunk-Commit #1870 (See [https://builds.apache.org/job/Hadoop-Hdfs-trunk-Commit/1870/])
    HADOOP-8098. KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name (tucu) (Revision 1294757)

     Result = SUCCESS
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1294757
Files : 
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/docs/src/documentation/content/xdocs/HttpAuthentication.xml
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/http/HttpServer.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/AuthenticationFilterInitializer.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/security/TestAuthenticationFilter.java

                
> KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name
> -----------------------------------------------------------------------------------
>
>                 Key: HADOOP-8098
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8098
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.24.0, 0.23.2
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.23.2
>
>         Attachments: HADOOP-8098.patch
>
>
> Currently the exact Kerberos principal name has to be set in the configuration of each node.
> KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (HADOOP-8098) KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

Posted by "Alejandro Abdelnur (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/HADOOP-8098?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alejandro Abdelnur updated HADOOP-8098:
---------------------------------------

    Attachment: HADOOP-8098.patch

Adding support for handling _HOST resolution. The resolution is done at filter-initializer level.
                
> KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name
> -----------------------------------------------------------------------------------
>
>                 Key: HADOOP-8098
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8098
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.24.0, 0.23.2
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.23.2
>
>         Attachments: HADOOP-8098.patch
>
>
> Currently the exact Kerberos principal name has to be set in the configuration of each node.
> KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira