You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@hbase.apache.org by vj...@apache.org on 2021/02/05 17:05:52 UTC
[hbase] branch branch-2.2 updated: HBASE-25543 When configuration
hadoop.security.authorization is set to false,
the system will still try to authorize an RPC and raise
AccessDeniedException (#2929) (#2919)
This is an automated email from the ASF dual-hosted git repository.
vjasani pushed a commit to branch branch-2.2
in repository https://gitbox.apache.org/repos/asf/hbase.git
The following commit(s) were added to refs/heads/branch-2.2 by this push:
new 6b4713d HBASE-25543 When configuration hadoop.security.authorization is set to false, the system will still try to authorize an RPC and raise AccessDeniedException (#2929) (#2919)
6b4713d is described below
commit 6b4713dbb31fa0a25d787b0a7bb72bd8792f4f94
Author: YutSean <33...@users.noreply.github.com>
AuthorDate: Sat Feb 6 00:37:21 2021 +0800
HBASE-25543 When configuration hadoop.security.authorization is set to false, the system will still try to authorize an RPC and raise AccessDeniedException (#2929) (#2919)
Signed-off-by: Viraj Jasani <vj...@apache.org>
Signed-off-by: Reid Chan <re...@apache.org>
---
hbase-server/src/main/java/org/apache/hadoop/hbase/ipc/RpcServer.java | 4 ++++
.../main/java/org/apache/hadoop/hbase/ipc/ServerRpcConnection.java | 2 +-
2 files changed, 5 insertions(+), 1 deletion(-)
diff --git a/hbase-server/src/main/java/org/apache/hadoop/hbase/ipc/RpcServer.java b/hbase-server/src/main/java/org/apache/hadoop/hbase/ipc/RpcServer.java
index b20e3e2..58cbd6e 100644
--- a/hbase-server/src/main/java/org/apache/hadoop/hbase/ipc/RpcServer.java
+++ b/hbase-server/src/main/java/org/apache/hadoop/hbase/ipc/RpcServer.java
@@ -847,4 +847,8 @@ public abstract class RpcServer implements RpcServerInterface,
public void setRsRpcServices(RSRpcServices rsRpcServices) {
this.rsRpcServices = rsRpcServices;
}
+
+ protected boolean needAuthorization() {
+ return authorize;
+ }
}
diff --git a/hbase-server/src/main/java/org/apache/hadoop/hbase/ipc/ServerRpcConnection.java b/hbase-server/src/main/java/org/apache/hadoop/hbase/ipc/ServerRpcConnection.java
index cff917f..c8569c3 100644
--- a/hbase-server/src/main/java/org/apache/hadoop/hbase/ipc/ServerRpcConnection.java
+++ b/hbase-server/src/main/java/org/apache/hadoop/hbase/ipc/ServerRpcConnection.java
@@ -456,7 +456,7 @@ abstract class ServerRpcConnection implements Closeable {
} else {
processConnectionHeader(buf);
this.connectionHeaderRead = true;
- if (!authorizeConnection()) {
+ if (rpcServer.needAuthorization() && !authorizeConnection()) {
// Throw FatalConnectionException wrapping ACE so client does right thing and closes
// down the connection instead of trying to read non-existent retun.
throw new AccessDeniedException("Connection from " + this + " for service " +