You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@storm.apache.org by arunmahadevan <gi...@git.apache.org> on 2016/08/19 05:19:12 UTC
[GitHub] storm pull request #1636: [STORM-2047] Add note to add logviewer hosts to br...
GitHub user arunmahadevan opened a pull request:
https://github.com/apache/storm/pull/1636
[STORM-2047] Add note to add logviewer hosts to browser whitelist
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/arunmahadevan/storm STORM-2047
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/storm/pull/1636.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #1636
----
commit 4875f6ebd33d60c9e0ab43c022268915f74cd2eb
Author: Arun Mahadevan <ar...@apache.org>
Date: 2016-08-19T05:18:15Z
[STORM-2047] Add note to add logviewer hosts to browser whitelist
----
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastructure@apache.org or file a JIRA ticket
with INFRA.
---
[GitHub] storm issue #1636: [STORM-2047] Add note to add logviewer hosts to browser w...
Posted by HeartSaVioR <gi...@git.apache.org>.
Github user HeartSaVioR commented on the issue:
https://github.com/apache/storm/pull/1636
+1
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastructure@apache.org or file a JIRA ticket
with INFRA.
---
[GitHub] storm pull request #1636: [STORM-2047] Add note to add logviewer hosts to br...
Posted by arunmahadevan <gi...@git.apache.org>.
Github user arunmahadevan commented on a diff in the pull request:
https://github.com/apache/storm/pull/1636#discussion_r75576234
--- Diff: docs/SECURITY.md ---
@@ -81,7 +81,9 @@ curl -i --negotiate -u:anyUser -b ~/cookiejar.txt -c ~/cookiejar.txt http://s
1. Firefox: Goto about:config and search for network.negotiate-auth.trusted-uris double-click to add value "http://storm-ui-hostname:8080"
2. Google-chrome: start from command line with: google-chrome --auth-server-whitelist="*storm-ui-hostname" --auth-negotiate-delegate-whitelist="*storm-ui-hostname"
-3. IE: Configure trusted websites to include "storm-ui-hostname" and allow negotiation for that website
+3. IE: Configure trusted websites to include "storm-ui-hostname" and allow negotiation for that website
+
+**Note**: For viewing any logs via `logviewer` in secure mode, all the hosts that runs `logviewer` should also be added to the above white list.
--- End diff --
@raghavgautam mentioned explicitly.
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastructure@apache.org or file a JIRA ticket
with INFRA.
---
[GitHub] storm pull request #1636: [STORM-2047] Add note to add logviewer hosts to br...
Posted by asfgit <gi...@git.apache.org>.
Github user asfgit closed the pull request at:
https://github.com/apache/storm/pull/1636
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastructure@apache.org or file a JIRA ticket
with INFRA.
---
[GitHub] storm issue #1636: [STORM-2047] Add note to add logviewer hosts to browser w...
Posted by raghavgautam <gi...@git.apache.org>.
Github user raghavgautam commented on the issue:
https://github.com/apache/storm/pull/1636
\U0001f44d Looks good
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastructure@apache.org or file a JIRA ticket
with INFRA.
---
[GitHub] storm pull request #1636: [STORM-2047] Add note to add logviewer hosts to br...
Posted by raghavgautam <gi...@git.apache.org>.
Github user raghavgautam commented on a diff in the pull request:
https://github.com/apache/storm/pull/1636#discussion_r75531803
--- Diff: docs/SECURITY.md ---
@@ -81,7 +81,9 @@ curl -i --negotiate -u:anyUser -b ~/cookiejar.txt -c ~/cookiejar.txt http://s
1. Firefox: Goto about:config and search for network.negotiate-auth.trusted-uris double-click to add value "http://storm-ui-hostname:8080"
2. Google-chrome: start from command line with: google-chrome --auth-server-whitelist="*storm-ui-hostname" --auth-negotiate-delegate-whitelist="*storm-ui-hostname"
-3. IE: Configure trusted websites to include "storm-ui-hostname" and allow negotiation for that website
+3. IE: Configure trusted websites to include "storm-ui-hostname" and allow negotiation for that website
+
+**Note**: For viewing any logs via `logviewer` in secure mode, all the hosts that runs `logviewer` should also be added to the above white list.
--- End diff --
For a large cluster, adding all log viewers hosts may not scale well for large cluster. In case of firefox just adding domain suffices. Suppose your cluster has:
c1.apache.org
c2.apache.org
c3.apache.org
Then we can set network.negotiate-auth.trusted-uris to `.apache.org`
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastructure@apache.org or file a JIRA ticket
with INFRA.
---