You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@zookeeper.apache.org by "Patrick Hunt (JIRA)" <ji...@apache.org> on 2009/06/05 22:44:07 UTC

[jira] Created: (ZOOKEEPER-435) allow "super" admin digest based auth to be configurable

allow "super" admin digest based auth to be configurable
--------------------------------------------------------

                 Key: ZOOKEEPER-435
                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-435
             Project: Zookeeper
          Issue Type: Bug
          Components: server
            Reporter: Patrick Hunt
            Priority: Critical
             Fix For: 3.2.0


the server has a "super" digest based auth user that enables administrative access (ie has access to znodes regardless
of acl settings) but the password is not configurable

1) make the default digest null, ie turn off "super" by default
2) if a command line option is specified when starting server then use the provided digest for super

eg. java -Dzookeeper.DigestAuthenticationProvider.superDigest=xkxkxkxkx ....

also this is not documented in the forrest docs - need to add that along with tests as part of the patch.


-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (ZOOKEEPER-435) allow "super" admin digest based auth to be configurable

Posted by "Benjamin Reed (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/ZOOKEEPER-435?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Benjamin Reed updated ZOOKEEPER-435:
------------------------------------

    Resolution: Fixed
        Status: Resolved  (was: Patch Available)

Committed revision 782882.

> allow "super" admin digest based auth to be configurable
> --------------------------------------------------------
>
>                 Key: ZOOKEEPER-435
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-435
>             Project: Zookeeper
>          Issue Type: Bug
>          Components: server
>            Reporter: Patrick Hunt
>            Assignee: Patrick Hunt
>            Priority: Critical
>             Fix For: 3.2.0
>
>         Attachments: ZOOKEEPER-435.patch
>
>
> the server has a "super" digest based auth user that enables administrative access (ie has access to znodes regardless
> of acl settings) but the password is not configurable
> 1) make the default digest null, ie turn off "super" by default
> 2) if a command line option is specified when starting server then use the provided digest for super
> eg. java -Dzookeeper.DigestAuthenticationProvider.superDigest=xkxkxkxkx ....
> also this is not documented in the forrest docs - need to add that along with tests as part of the patch.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (ZOOKEEPER-435) allow "super" admin digest based auth to be configurable

Posted by "Hudson (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/ZOOKEEPER-435?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12718514#action_12718514 ] 

Hudson commented on ZOOKEEPER-435:
----------------------------------

Integrated in ZooKeeper-trunk #343 (See [http://hudson.zones.apache.org/hudson/job/ZooKeeper-trunk/343/])
    

> allow "super" admin digest based auth to be configurable
> --------------------------------------------------------
>
>                 Key: ZOOKEEPER-435
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-435
>             Project: Zookeeper
>          Issue Type: Bug
>          Components: server
>            Reporter: Patrick Hunt
>            Assignee: Patrick Hunt
>            Priority: Critical
>             Fix For: 3.2.0
>
>         Attachments: ZOOKEEPER-435.patch
>
>
> the server has a "super" digest based auth user that enables administrative access (ie has access to znodes regardless
> of acl settings) but the password is not configurable
> 1) make the default digest null, ie turn off "super" by default
> 2) if a command line option is specified when starting server then use the provided digest for super
> eg. java -Dzookeeper.DigestAuthenticationProvider.superDigest=xkxkxkxkx ....
> also this is not documented in the forrest docs - need to add that along with tests as part of the patch.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (ZOOKEEPER-435) allow "super" admin digest based auth to be configurable

Posted by "Patrick Hunt (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/ZOOKEEPER-435?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Patrick Hunt updated ZOOKEEPER-435:
-----------------------------------

    Status: Open  (was: Patch Available)

> allow "super" admin digest based auth to be configurable
> --------------------------------------------------------
>
>                 Key: ZOOKEEPER-435
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-435
>             Project: Zookeeper
>          Issue Type: Bug
>          Components: server
>            Reporter: Patrick Hunt
>            Assignee: Patrick Hunt
>            Priority: Critical
>             Fix For: 3.2.0
>
>         Attachments: ZOOKEEPER-435.patch
>
>
> the server has a "super" digest based auth user that enables administrative access (ie has access to znodes regardless
> of acl settings) but the password is not configurable
> 1) make the default digest null, ie turn off "super" by default
> 2) if a command line option is specified when starting server then use the provided digest for super
> eg. java -Dzookeeper.DigestAuthenticationProvider.superDigest=xkxkxkxkx ....
> also this is not documented in the forrest docs - need to add that along with tests as part of the patch.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (ZOOKEEPER-435) allow "super" admin digest based auth to be configurable

Posted by "Patrick Hunt (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/ZOOKEEPER-435?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Patrick Hunt updated ZOOKEEPER-435:
-----------------------------------

    Status: Patch Available  (was: Open)

> allow "super" admin digest based auth to be configurable
> --------------------------------------------------------
>
>                 Key: ZOOKEEPER-435
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-435
>             Project: Zookeeper
>          Issue Type: Bug
>          Components: server
>            Reporter: Patrick Hunt
>            Assignee: Patrick Hunt
>            Priority: Critical
>             Fix For: 3.2.0
>
>         Attachments: ZOOKEEPER-435.patch
>
>
> the server has a "super" digest based auth user that enables administrative access (ie has access to znodes regardless
> of acl settings) but the password is not configurable
> 1) make the default digest null, ie turn off "super" by default
> 2) if a command line option is specified when starting server then use the provided digest for super
> eg. java -Dzookeeper.DigestAuthenticationProvider.superDigest=xkxkxkxkx ....
> also this is not documented in the forrest docs - need to add that along with tests as part of the patch.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (ZOOKEEPER-435) allow "super" admin digest based auth to be configurable

Posted by "Benjamin Reed (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/ZOOKEEPER-435?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Benjamin Reed updated ZOOKEEPER-435:
------------------------------------

    Hadoop Flags: [Reviewed]

+1 looks good! btw, the qa latency seems really high!

> allow "super" admin digest based auth to be configurable
> --------------------------------------------------------
>
>                 Key: ZOOKEEPER-435
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-435
>             Project: Zookeeper
>          Issue Type: Bug
>          Components: server
>            Reporter: Patrick Hunt
>            Assignee: Patrick Hunt
>            Priority: Critical
>             Fix For: 3.2.0
>
>         Attachments: ZOOKEEPER-435.patch
>
>
> the server has a "super" digest based auth user that enables administrative access (ie has access to znodes regardless
> of acl settings) but the password is not configurable
> 1) make the default digest null, ie turn off "super" by default
> 2) if a command line option is specified when starting server then use the provided digest for super
> eg. java -Dzookeeper.DigestAuthenticationProvider.superDigest=xkxkxkxkx ....
> also this is not documented in the forrest docs - need to add that along with tests as part of the patch.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Assigned: (ZOOKEEPER-435) allow "super" admin digest based auth to be configurable

Posted by "Patrick Hunt (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/ZOOKEEPER-435?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Patrick Hunt reassigned ZOOKEEPER-435:
--------------------------------------

    Assignee: Patrick Hunt

> allow "super" admin digest based auth to be configurable
> --------------------------------------------------------
>
>                 Key: ZOOKEEPER-435
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-435
>             Project: Zookeeper
>          Issue Type: Bug
>          Components: server
>            Reporter: Patrick Hunt
>            Assignee: Patrick Hunt
>            Priority: Critical
>             Fix For: 3.2.0
>
>
> the server has a "super" digest based auth user that enables administrative access (ie has access to znodes regardless
> of acl settings) but the password is not configurable
> 1) make the default digest null, ie turn off "super" by default
> 2) if a command line option is specified when starting server then use the provided digest for super
> eg. java -Dzookeeper.DigestAuthenticationProvider.superDigest=xkxkxkxkx ....
> also this is not documented in the forrest docs - need to add that along with tests as part of the patch.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (ZOOKEEPER-435) allow "super" admin digest based auth to be configurable

Posted by "Patrick Hunt (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/ZOOKEEPER-435?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Patrick Hunt updated ZOOKEEPER-435:
-----------------------------------

    Status: Patch Available  (was: Open)

> allow "super" admin digest based auth to be configurable
> --------------------------------------------------------
>
>                 Key: ZOOKEEPER-435
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-435
>             Project: Zookeeper
>          Issue Type: Bug
>          Components: server
>            Reporter: Patrick Hunt
>            Assignee: Patrick Hunt
>            Priority: Critical
>             Fix For: 3.2.0
>
>         Attachments: ZOOKEEPER-435.patch
>
>
> the server has a "super" digest based auth user that enables administrative access (ie has access to znodes regardless
> of acl settings) but the password is not configurable
> 1) make the default digest null, ie turn off "super" by default
> 2) if a command line option is specified when starting server then use the provided digest for super
> eg. java -Dzookeeper.DigestAuthenticationProvider.superDigest=xkxkxkxkx ....
> also this is not documented in the forrest docs - need to add that along with tests as part of the patch.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (ZOOKEEPER-435) allow "super" admin digest based auth to be configurable

Posted by "Patrick Hunt (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/ZOOKEEPER-435?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Patrick Hunt updated ZOOKEEPER-435:
-----------------------------------

    Attachment: ZOOKEEPER-435.patch

Made super configurable, added tests and documentation.


> allow "super" admin digest based auth to be configurable
> --------------------------------------------------------
>
>                 Key: ZOOKEEPER-435
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-435
>             Project: Zookeeper
>          Issue Type: Bug
>          Components: server
>            Reporter: Patrick Hunt
>            Assignee: Patrick Hunt
>            Priority: Critical
>             Fix For: 3.2.0
>
>         Attachments: ZOOKEEPER-435.patch
>
>
> the server has a "super" digest based auth user that enables administrative access (ie has access to znodes regardless
> of acl settings) but the password is not configurable
> 1) make the default digest null, ie turn off "super" by default
> 2) if a command line option is specified when starting server then use the provided digest for super
> eg. java -Dzookeeper.DigestAuthenticationProvider.superDigest=xkxkxkxkx ....
> also this is not documented in the forrest docs - need to add that along with tests as part of the patch.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (ZOOKEEPER-435) allow "super" admin digest based auth to be configurable

Posted by "Hadoop QA (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/ZOOKEEPER-435?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12717487#action_12717487 ] 

Hadoop QA commented on ZOOKEEPER-435:
-------------------------------------

+1 overall.  Here are the results of testing the latest attachment 
  http://issues.apache.org/jira/secure/attachment/12410035/ZOOKEEPER-435.patch
  against trunk revision 782792.

    +1 @author.  The patch does not contain any @author tags.

    +1 tests included.  The patch appears to include 2 new or modified tests.

    +1 javadoc.  The javadoc tool did not generate any warning messages.

    +1 javac.  The applied patch does not increase the total number of javac compiler warnings.

    +1 findbugs.  The patch does not introduce any new Findbugs warnings.

    +1 release audit.  The applied patch does not increase the total number of release audit warnings.

    +1 core tests.  The patch passed core unit tests.

    +1 contrib tests.  The patch passed contrib unit tests.

Test results: http://hudson.zones.apache.org/hudson/job/Zookeeper-Patch-vesta.apache.org/105/testReport/
Findbugs warnings: http://hudson.zones.apache.org/hudson/job/Zookeeper-Patch-vesta.apache.org/105/artifact/trunk/build/test/findbugs/newPatchFindbugsWarnings.html
Console output: http://hudson.zones.apache.org/hudson/job/Zookeeper-Patch-vesta.apache.org/105/console

This message is automatically generated.

> allow "super" admin digest based auth to be configurable
> --------------------------------------------------------
>
>                 Key: ZOOKEEPER-435
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-435
>             Project: Zookeeper
>          Issue Type: Bug
>          Components: server
>            Reporter: Patrick Hunt
>            Assignee: Patrick Hunt
>            Priority: Critical
>             Fix For: 3.2.0
>
>         Attachments: ZOOKEEPER-435.patch
>
>
> the server has a "super" digest based auth user that enables administrative access (ie has access to znodes regardless
> of acl settings) but the password is not configurable
> 1) make the default digest null, ie turn off "super" by default
> 2) if a command line option is specified when starting server then use the provided digest for super
> eg. java -Dzookeeper.DigestAuthenticationProvider.superDigest=xkxkxkxkx ....
> also this is not documented in the forrest docs - need to add that along with tests as part of the patch.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.