You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by "Arun Suresh (JIRA)" <ji...@apache.org> on 2015/04/21 20:26:58 UTC

[jira] [Updated] (HADOOP-11704) DelegationTokenAuthenticationFilter must pass ipaddress instead of hostname to ProxyUsers#authorize()

     [ https://issues.apache.org/jira/browse/HADOOP-11704?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Arun Suresh updated HADOOP-11704:
---------------------------------
    Summary: DelegationTokenAuthenticationFilter must pass ipaddress instead of hostname to ProxyUsers#authorize()  (was: ProxyUsers expects ipaddress due to MachineList but callers send in remote host )

> DelegationTokenAuthenticationFilter must pass ipaddress instead of hostname to ProxyUsers#authorize()
> -----------------------------------------------------------------------------------------------------
>
>                 Key: HADOOP-11704
>                 URL: https://issues.apache.org/jira/browse/HADOOP-11704
>             Project: Hadoop Common
>          Issue Type: Bug
>            Reporter: Anubhav Dhoot
>            Assignee: Anubhav Dhoot
>             Fix For: 2.8.0
>
>         Attachments: HADOOP-11704.001.patch, HADOOP-11704.002.patch
>
>
> DelegationTokenAuthenticationHandler and DelegationTokenAuthenticationFilter are using ServletRequest#getRemoteHost which can send an address if possible. It should use getRemoteAddr instead



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)