[jira] [Created] (HDDS-5165) OM DB checkpoint servlet not accessible in a secure cluster

["Vivek Ratnavel Subramanian (Jira)" <ji...@apache.org>]

Vivek Ratnavel Subramanian created HDDS-5165:
------------------------------------------------

             Summary: OM DB checkpoint servlet not accessible in a secure cluster
                 Key: HDDS-5165
                 URL: https://issues.apache.org/jira/browse/HDDS-5165
             Project: Apache Ozone
          Issue Type: Bug
          Components: OM
    Affects Versions: 1.1.0
            Reporter: Vivek Ratnavel Subramanian
            Assignee: Vivek Ratnavel Subramanian


When security and ACL is enabled, but not spnego, the OMDBCheckpointServlet throws an error:
{code:java}
10:02:29.094 PM ERROR OMDBCheckpointServlet 
 Permission denied: User principal 'dr.who' does not have access to /dbCheckpoint.
 This can happen when Ozone Manager is started with a different user.
 Please append 'dr.who' to OM 'ozone.administrators' config and restart OM to grant current user access to this endpoint.{code}

When Spnego is disabled, permissions cannot be checked since HTTP request will not have an identity (kerberos principal) which is causing this error.





--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org