You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@knox.apache.org by "Larry McCay (JIRA)" <ji...@apache.org> on 2014/03/07 22:42:42 UTC

[jira] [Created] (KNOX-303) Handle Invalid SLA ACL Configuration

Larry McCay created KNOX-303:
--------------------------------

             Summary: Handle Invalid SLA ACL Configuration
                 Key: KNOX-303
                 URL: https://issues.apache.org/jira/browse/KNOX-303
             Project: Apache Knox
          Issue Type: Bug
          Components: Server
            Reporter: Larry McCay


1. Indexoutof bounds 
when ACL value is
<param>
<name>webhdfs.acl</name>
<value>guest</value>
</param>
at org.apache.hadoop.gateway.filter.AclsAuthorizationFilter.parseGroupAcls(AclsAuthorizationFilter.java:120)
at org.apache.hadoop.gateway.filter.AclsAuthorizationFilter.parseAcls(AclsAuthorizationFilter.java:98)
at org.apache.hadoop.gateway.filter.AclsAuthorizationFilter.init(AclsAuthorizationFilter.java:77)
at org.apache.hadoop.gateway.GatewayFilter$Holder.getInstance(GatewayFilter.java:341)
at org.apache.hadoop.gateway.GatewayFilter$Holder.doFilter(GatewayFilter.java:311)
at org.apache.hadoop.gateway.GatewayFilter$Chain.doFilter(GatewayFilter.java:212)
at org.apache.hadoop.gateway.filter.security.AbstractIdentityAssertionFilter.doFilterInternal(AbstractIdentityAssertionFilter.java:209)
at org.apache.hadoop.gateway.filter.security.AbstractIdentityAssertionFilter.continueChainAsPrincipal(AbstractIdentityAssertionFilter.java:157)
at org.apache.hadoop.gateway.identityasserter.filter.IdentityAsserterFilter.doFilter(IdentityAsserterFilter.java:55)
1. Leads to Null pointer when value =
<param>
<name>webhdfs.acl</name>
<value>guest;;</value>
</param>
Server Error</pre></p><h3>Caused by:</h3><pre>org.apache.shiro.subject.ExecutionException: java.security.PrivilegedActionException: javax.servlet.ServletException: java.lang.NullPointerException
at org.apache.shiro.subject.support.DelegatingSubject.execute(DelegatingSubject.java:385)
at org.apache.hadoop.gateway.filter.ShiroSubjectIdentityAdapter.doFilter(ShiroSubjectIdentityAdapter.java:74)
at org.apache.hadoop.gateway.GatewayFilter$Holder.doFilter(GatewayFilter.java:311)
at org.apache.hadoop.gateway.GatewayFilter$Chain.doFilter(GatewayFilter.java:212)
at org.apache.shiro.web.servlet.ProxiedFilterChain.doFilter(ProxiedFilterChain.java:61)
at org.apache.shiro.web.servlet.AdviceFilter.executeChain(AdviceFilter.java:108)



--
This message was sent by Atlassian JIRA
(v6.2#6252)