You are viewing a plain text version of this content. The canonical link for it is here.

Posted to hdfs-issues@hadoop.apache.org by "Bangtao Zhou (JIRA)" <ji...@apache.org> on 2014/05/20 12:54:38 UTC

[jira] [Updated] (HDFS-6436) WebHdfsFileSystem execute get, renew and cancel delegationtoken operation should use spnego to authenticate

     [ https://issues.apache.org/jira/browse/HDFS-6436?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Bangtao Zhou updated HDFS-6436:
-------------------------------

    Description: while in kerberos secure mode, when using WebHdfsFileSystem to access HDFS, it allways get an *org.apache.hadoop.security.authentication.client.AuthenticationException: Unauthorized*, for example, when call WebHdfsFileSystem.listStatus it will execute a LISTSTATUS Op, and this Op should authenticate via *delegation token*, so it will execute a GETDELEGATIONTOKEN Op to get a delegation token(actually GETDELEGATIONTOKEN authenticate via *SPNEGO*), but it still use delegation token to authenticate, so it allways get an Unauthorized Exception.  (was: while in kerberos secure mode, when use WebHdfsFileSystem to access HDFS, it allways get an *org.apache.hadoop.security.authentication.client.AuthenticationException: Unauthorized*)

> WebHdfsFileSystem execute get, renew and cancel delegationtoken operation should use spnego to authenticate
> -----------------------------------------------------------------------------------------------------------
>
>                 Key: HDFS-6436
>                 URL: https://issues.apache.org/jira/browse/HDFS-6436
>             Project: Hadoop HDFS
>          Issue Type: Bug
>          Components: webhdfs
>    Affects Versions: 3.0.0, 2.4.0
>         Environment: Kerberos
>            Reporter: Bangtao Zhou
>             Fix For: 3.0.0
>
>
> while in kerberos secure mode, when using WebHdfsFileSystem to access HDFS, it allways get an *org.apache.hadoop.security.authentication.client.AuthenticationException: Unauthorized*, for example, when call WebHdfsFileSystem.listStatus it will execute a LISTSTATUS Op, and this Op should authenticate via *delegation token*, so it will execute a GETDELEGATIONTOKEN Op to get a delegation token(actually GETDELEGATIONTOKEN authenticate via *SPNEGO*), but it still use delegation token to authenticate, so it allways get an Unauthorized Exception.



--
This message was sent by Atlassian JIRA
(v6.2#6252)