You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@falcon.apache.org by "Sowmya Ramesh (JIRA)" <ji...@apache.org> on 2016/05/17 21:42:13 UTC
[jira] [Resolved] (FALCON-1943) Extension API/CLI fails when
authorization is enabled
[ https://issues.apache.org/jira/browse/FALCON-1943?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Sowmya Ramesh resolved FALCON-1943.
-----------------------------------
Resolution: Fixed
commit 4ccd3b119389e9707cc69ef89e6d38dd6639cb32
> Extension API/CLI fails when authorization is enabled
> -----------------------------------------------------
>
> Key: FALCON-1943
> URL: https://issues.apache.org/jira/browse/FALCON-1943
> Project: Falcon
> Issue Type: Bug
> Reporter: Sowmya Ramesh
> Assignee: Sowmya Ramesh
>
> Extension REST API's fail with Authorization failed : 400/Illegal resource
> {noformat}
> 2016-05-06 00:42:59,616 INFO - [main:] ~ Generated unique-instance-id=ac165f6421108-os-r6-mhblfu-falcon-3-31 (GraphDatabaseConfiguration:1469)
> 2016-05-06 00:42:59,660 INFO - [main:] ~ Initiated backend operations thread pool of size 4 (Backend:168)
> 2016-05-06 00:42:59,744 INFO - [main:] ~ Loaded unidentified ReadMarker start time Timepoint[1462495379743000 μs] into com.thinkaurelius.titan.diskstorage.log.kcvs.KCVSLog$MessagePuller@3520a0d7 (KCVSLog:733)
> 2016-05-06 00:42:59,947 INFO - [main:] ~ Indexes already exist for graph (MetadataMappingService:148)
> 2016-05-06 00:42:59,948 INFO - [main:] ~ Initialized graph db: titangraph[berkeleyje:/hadoop/falcon/data/lineage/graphdb] (MetadataMappingService:93)
> 2016-05-06 00:42:59,950 INFO - [main:] ~ Init vertex property keys: [name, type, version, timestamp] (MetadataMappingService:96)
> 2016-05-06 00:42:59,953 INFO - [main:] ~ Init edge property keys: [name, type, version, timestamp] (MetadataMappingService:99)
> 2016-05-06 00:42:59,958 INFO - [main:] ~ Service initialized: org.apache.falcon.metadata.MetadataMappingService (ServiceInitializer:52)
> 2016-05-06 00:42:59,961 INFO - [main:] ~ FalconAuditFilter initialization started (FalconAuditFilter:49)
> 2016-05-06 00:42:59,965 INFO - [main:] ~ FalconAuthenticationFilter initialization started (FalconAuthenticationFilter:83)
> 2016-05-06 00:42:59,985 INFO - [main:] ~ Falcon is running with authorization enabled (FalconAuthorizationFilter:62)
> 2016-05-06 00:43:01,623 INFO - [main:] ~ Started SocketConnector@0.0.0.0:15000 (log:67)
> 2016-05-06 00:43:08,832 INFO - [1706292388@qtp-1610702581-0 - 88ba0bf7-2300-48a5-92a7-fede4775b523:] ~ HttpServletRequest RemoteUser is null (Servlets:47)
> 2016-05-06 00:43:08,836 INFO - [1706292388@qtp-1610702581-0 - 88ba0bf7-2300-48a5-92a7-fede4775b523:] ~ HttpServletRequest user.name param value is falcon (Servlets:53)
> 2016-05-06 00:43:08,838 DEBUG - [1706292388@qtp-1610702581-0 - 88ba0bf7-2300-48a5-92a7-fede4775b523:] ~ Audit: falcon/172.22.95.100 performed request http://os-r6-mhblfu-falcon-3-3.openstacklocal:15000/api/options?user.name=falcon (172.22.95.100) at time 2016-05-06T00:43Z (FalconAuditFilter:86)
> 2016-05-06 00:43:08,875 INFO - [1706292388@qtp-1610702581-0 - ba3e5632-1457-415e-bdd4-4a81d31c4f70:] ~ HttpServletRequest RemoteUser is null (Servlets:47)
> 2016-05-06 00:43:08,876 INFO - [1706292388@qtp-1610702581-0 - ba3e5632-1457-415e-bdd4-4a81d31c4f70:] ~ HttpServletRequest user.name param value is falcon (Servlets:53)
> 2016-05-06 00:43:08,876 DEBUG - [1706292388@qtp-1610702581-0 - ba3e5632-1457-415e-bdd4-4a81d31c4f70:] ~ Audit: falcon/172.22.95.100 performed request http://os-r6-mhblfu-falcon-3-3.openstacklocal:15000/api/options?user.name=falcon&user.name=falcon (172.22.95.100) at time 2016-05-06T00:43Z (FalconAuditFilter:86)
> 2016-05-06 00:43:08,917 INFO - [1706292388@qtp-1610702581-0 - 87cabbc5-87d9-45d3-aac8-5620c7cee207:] ~ HttpServletRequest RemoteUser is falcon (Servlets:47)
> 2016-05-06 00:43:08,919 INFO - [1706292388@qtp-1610702581-0 - 87cabbc5-87d9-45d3-aac8-5620c7cee207:falcon:GET//extension/enumerate/] ~ Logging in falcon (CurrentUser:65)
> 2016-05-06 00:43:08,919 INFO - [1706292388@qtp-1610702581-0 - 87cabbc5-87d9-45d3-aac8-5620c7cee207:falcon:GET//extension/enumerate/] ~ Request from authenticated user: falcon, URL=/api/extension/enumerate/, doAs user: null (FalconAuthenticationFilter:185)
> 2016-05-06 00:43:08,921 INFO - [1706292388@qtp-1610702581-0 - 87cabbc5-87d9-45d3-aac8-5620c7cee207:falcon:GET//extension/enumerate/] ~ Authorizing user=falcon against request=RequestParts{resource='extension', action='enumerate'} (FalconAuthorizationFilter:78)
> 2016-05-06 00:43:08,922 ERROR - [1706292388@qtp-1610702581-0 - 87cabbc5-87d9-45d3-aac8-5620c7cee207:falcon:GET//extension/enumerate/] ~ Authorization failed : 400/Illegal resource: extension (FalconAuthorizationFilter:155)
> 2016-05-06 00:43:08,931 DEBUG - [1706292388@qtp-1610702581-0 - 87cabbc5-87d9-45d3-aac8-5620c7cee207:] ~ Audit: falcon/172.22.95.100 performed request http://os-r6-mhblfu-falcon-3-3.openstacklocal:15000/api/extension/enumerate/ (172.22.95.100) at time 2016-05-06T00:43Z (FalconAuditFilter:86)
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)