You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Tsz Wo (Nicholas), SZE (Commented) (JIRA)" <ji...@apache.org> on 2012/02/29 21:42:02 UTC

[jira] [Commented] (HADOOP-7119) add Kerberos HTTP SPNEGO authentication support to Hadoop JT/NN/DN/TT web-consoles

    [ https://issues.apache.org/jira/browse/HADOOP-7119?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13219526#comment-13219526 ] 

Tsz Wo (Nicholas), SZE commented on HADOOP-7119:
------------------------------------------------

The patch committed introduced findbugs warnigns (HADOOP-7576), javac warnings (HADOOP-8119), javadoc warnings (HADOOP-7898) and broke mvn eclipse:eclipse (HADOOP-7567).  The javac and findbugs warnings were catched by [this Jenkins report|https://issues.apache.org/jira/browse/HADOOP-7119?focusedCommentId=13088021&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-13088021].

> +1, the latest patch looks good to me. I'll commit this shortly.

Hi Aaron, why the patch was committed?
                
> add Kerberos HTTP SPNEGO authentication support to Hadoop JT/NN/DN/TT web-consoles
> ----------------------------------------------------------------------------------
>
>                 Key: HADOOP-7119
>                 URL: https://issues.apache.org/jira/browse/HADOOP-7119
>             Project: Hadoop Common
>          Issue Type: New Feature
>          Components: security
>    Affects Versions: 0.23.0
>         Environment: all
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.20.205.0, 0.23.0
>
>         Attachments: HADOOP-7119v3.patch, HADOOP-7119v4-amendment.patch, HADOOP-7119v4.patch, HADOOP-7119v5.patch, HADOOP-7119v6.patch, ha-common-01.patch, ha-common-02.patch, ha-commons.patch, spnego-20-security.patch, spnego-20-security2.patch, spnego-20-security3.patch, spnego-20-security4.patch
>
>
> Currently the JT/NN/DN/TT web-consoles don't support any form of authentication.
> Hadoop RPC API already supports Kerberos authentication.
> Kerberos enables single sign-on.
> Popular browsers (Firefox and Internet Explorer) have support for Kerberos HTTP SPNEGO.
> Adding support for Kerberos HTTP SPNEGO to Hadoop web consoles would provide a unified authentication mechanism and single sign-on for Hadoop web UI and Hadoop RPC.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira