You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@falcon.apache.org by "Sowmya Ramesh (JIRA)" <ji...@apache.org> on 2016/05/10 22:35:12 UTC

[jira] [Created] (FALCON-1943) Extension API/CLI fails when authorization is enabled

Sowmya Ramesh created FALCON-1943:
-------------------------------------

             Summary: Extension API/CLI fails when authorization is enabled
                 Key: FALCON-1943
                 URL: https://issues.apache.org/jira/browse/FALCON-1943
             Project: Falcon
          Issue Type: Bug
            Reporter: Sowmya Ramesh
            Assignee: Sowmya Ramesh


Extension REST API's fail with Authorization failed : 400/Illegal resource
{noformat}
2016-05-06 00:42:59,616 INFO  - [main:] ~ Generated unique-instance-id=ac165f6421108-os-r6-mhblfu-falcon-3-31 (GraphDatabaseConfiguration:1469)
2016-05-06 00:42:59,660 INFO  - [main:] ~ Initiated backend operations thread pool of size 4 (Backend:168)
2016-05-06 00:42:59,744 INFO  - [main:] ~ Loaded unidentified ReadMarker start time Timepoint[1462495379743000 μs] into com.thinkaurelius.titan.diskstorage.log.kcvs.KCVSLog$MessagePuller@3520a0d7 (KCVSLog:733)
2016-05-06 00:42:59,947 INFO  - [main:] ~ Indexes already exist for graph (MetadataMappingService:148)
2016-05-06 00:42:59,948 INFO  - [main:] ~ Initialized graph db: titangraph[berkeleyje:/hadoop/falcon/data/lineage/graphdb] (MetadataMappingService:93)
2016-05-06 00:42:59,950 INFO  - [main:] ~ Init vertex property keys: [name, type, version, timestamp] (MetadataMappingService:96)
2016-05-06 00:42:59,953 INFO  - [main:] ~ Init edge property keys: [name, type, version, timestamp] (MetadataMappingService:99)
2016-05-06 00:42:59,958 INFO  - [main:] ~ Service initialized: org.apache.falcon.metadata.MetadataMappingService (ServiceInitializer:52)
2016-05-06 00:42:59,961 INFO  - [main:] ~ FalconAuditFilter initialization started (FalconAuditFilter:49)
2016-05-06 00:42:59,965 INFO  - [main:] ~ FalconAuthenticationFilter initialization started (FalconAuthenticationFilter:83)
2016-05-06 00:42:59,985 INFO  - [main:] ~ Falcon is running with authorization enabled (FalconAuthorizationFilter:62)
2016-05-06 00:43:01,623 INFO  - [main:] ~ Started SocketConnector@0.0.0.0:15000 (log:67)
2016-05-06 00:43:08,832 INFO  - [1706292388@qtp-1610702581-0 - 88ba0bf7-2300-48a5-92a7-fede4775b523:] ~ HttpServletRequest RemoteUser is null (Servlets:47)
2016-05-06 00:43:08,836 INFO  - [1706292388@qtp-1610702581-0 - 88ba0bf7-2300-48a5-92a7-fede4775b523:] ~ HttpServletRequest user.name param value is falcon (Servlets:53)
2016-05-06 00:43:08,838 DEBUG - [1706292388@qtp-1610702581-0 - 88ba0bf7-2300-48a5-92a7-fede4775b523:] ~ Audit: falcon/172.22.95.100 performed request http://os-r6-mhblfu-falcon-3-3.openstacklocal:15000/api/options?user.name=falcon (172.22.95.100) at time 2016-05-06T00:43Z (FalconAuditFilter:86)
2016-05-06 00:43:08,875 INFO  - [1706292388@qtp-1610702581-0 - ba3e5632-1457-415e-bdd4-4a81d31c4f70:] ~ HttpServletRequest RemoteUser is null (Servlets:47)
2016-05-06 00:43:08,876 INFO  - [1706292388@qtp-1610702581-0 - ba3e5632-1457-415e-bdd4-4a81d31c4f70:] ~ HttpServletRequest user.name param value is falcon (Servlets:53)
2016-05-06 00:43:08,876 DEBUG - [1706292388@qtp-1610702581-0 - ba3e5632-1457-415e-bdd4-4a81d31c4f70:] ~ Audit: falcon/172.22.95.100 performed request http://os-r6-mhblfu-falcon-3-3.openstacklocal:15000/api/options?user.name=falcon&user.name=falcon (172.22.95.100) at time 2016-05-06T00:43Z (FalconAuditFilter:86)
2016-05-06 00:43:08,917 INFO  - [1706292388@qtp-1610702581-0 - 87cabbc5-87d9-45d3-aac8-5620c7cee207:] ~ HttpServletRequest RemoteUser is falcon (Servlets:47)
2016-05-06 00:43:08,919 INFO  - [1706292388@qtp-1610702581-0 - 87cabbc5-87d9-45d3-aac8-5620c7cee207:falcon:GET//extension/enumerate/] ~ Logging in falcon (CurrentUser:65)
2016-05-06 00:43:08,919 INFO  - [1706292388@qtp-1610702581-0 - 87cabbc5-87d9-45d3-aac8-5620c7cee207:falcon:GET//extension/enumerate/] ~ Request from authenticated user: falcon, URL=/api/extension/enumerate/, doAs user: null (FalconAuthenticationFilter:185)
2016-05-06 00:43:08,921 INFO  - [1706292388@qtp-1610702581-0 - 87cabbc5-87d9-45d3-aac8-5620c7cee207:falcon:GET//extension/enumerate/] ~ Authorizing user=falcon against request=RequestParts{resource='extension', action='enumerate'} (FalconAuthorizationFilter:78)
2016-05-06 00:43:08,922 ERROR - [1706292388@qtp-1610702581-0 - 87cabbc5-87d9-45d3-aac8-5620c7cee207:falcon:GET//extension/enumerate/] ~ Authorization failed : 400/Illegal resource: extension (FalconAuthorizationFilter:155)
2016-05-06 00:43:08,931 DEBUG - [1706292388@qtp-1610702581-0 - 87cabbc5-87d9-45d3-aac8-5620c7cee207:] ~ Audit: falcon/172.22.95.100 performed request http://os-r6-mhblfu-falcon-3-3.openstacklocal:15000/api/extension/enumerate/ (172.22.95.100) at time 2016-05-06T00:43Z (FalconAuditFilter:86)
{noformat}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)