You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Allen Wittenauer (JIRA)" <ji...@apache.org> on 2015/05/06 05:35:03 UTC

[jira] [Updated] (HADOOP-10000) HttpServer log link is inaccessible in secure cluster

     [ https://issues.apache.org/jira/browse/HADOOP-10000?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Allen Wittenauer updated HADOOP-10000:
--------------------------------------
    Labels: BB2015-05-TBR  (was: )

> HttpServer log link is inaccessible in secure cluster
> -----------------------------------------------------
>
>                 Key: HADOOP-10000
>                 URL: https://issues.apache.org/jira/browse/HADOOP-10000
>             Project: Hadoop Common
>          Issue Type: Bug
>    Affects Versions: 3.0.0
>            Reporter: Jing Zhao
>            Assignee: Jing Zhao
>              Labels: BB2015-05-TBR
>         Attachments: HADOOP-10000.002.patch, HDFS-5217.000.patch, HDFS-5217.001.patch
>
>
> Currently in a secured HDFS cluster, 401 error is returned when clicking the "NameNode Logs" link.
> Looks like the cause of the issue is that the httpServer does not correctly set the security handler and the user realm currently, which causes the httpRequest.getRemoteUser (for the log URL) to return null and later be overwritten to the default web name (e.g., "dr.who") by the filter. In the meanwhile, in a secured cluster the log URL requires the http user to be an administrator. That's why we see the 401 error.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)