You are viewing a plain text version of this content. The canonical link for it is here.
Posted to hdfs-issues@hadoop.apache.org by "Ayush Saxena (Jira)" <ji...@apache.org> on 2023/05/05 17:23:00 UTC
[jira] [Commented] (HDFS-16563) Namenode WebUI prints sensitive information on Token Expiry
[ https://issues.apache.org/jira/browse/HDFS-16563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17719942#comment-17719942 ]
Ayush Saxena commented on HDFS-16563:
-------------------------------------
Causes issues with Hive attempt to upgrade to 3.3.5 as well, due to the message change
https://github.com/apache/hive/pull/4290
> Namenode WebUI prints sensitive information on Token Expiry
> -----------------------------------------------------------
>
> Key: HDFS-16563
> URL: https://issues.apache.org/jira/browse/HDFS-16563
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: namanode, security, webhdfs
> Affects Versions: 3.3.3
> Reporter: Renukaprasad C
> Assignee: Renukaprasad C
> Priority: Major
> Labels: pull-request-available
> Fix For: 3.4.0, 3.3.5
>
> Attachments: image-2022-04-27-23-01-16-033.png, image-2022-04-27-23-28-40-568.png
>
> Time Spent: 3h
> Remaining Estimate: 0h
>
> Login to Namenode WebUI.
> Wait for token to expire. (Or modify the Token refresh time
> dfs.namenode.delegation.token.renew/update-interval to lower value)
> Refresh the WebUI after the Token expiry.
> Full token information gets printed in WebUI.
>
> !image-2022-04-27-23-01-16-033.png!
> causes YARN-11172; all branches with this patch need that fix in too
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org