You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-commits@hadoop.apache.org by ji...@apache.org on 2011/10/07 03:52:49 UTC
svn commit: r1179919 - in /hadoop/common/branches/branch-0.20-security:
CHANGES.txt
src/core/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java
src/hdfs/org/apache/hadoop/hdfs/server/namenode/NameNode.java
Author: jitendra
Date: Fri Oct 7 01:52:48 2011
New Revision: 1179919
URL: http://svn.apache.org/viewvc?rev=1179919&view=rev
Log:
HDFS-2411. With webhdfs enabled in secure mode the auth to local mappings are not being respected.
Modified:
hadoop/common/branches/branch-0.20-security/CHANGES.txt
hadoop/common/branches/branch-0.20-security/src/core/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java
hadoop/common/branches/branch-0.20-security/src/hdfs/org/apache/hadoop/hdfs/server/namenode/NameNode.java
Modified: hadoop/common/branches/branch-0.20-security/CHANGES.txt
URL: http://svn.apache.org/viewvc/hadoop/common/branches/branch-0.20-security/CHANGES.txt?rev=1179919&r1=1179918&r2=1179919&view=diff
==============================================================================
--- hadoop/common/branches/branch-0.20-security/CHANGES.txt (original)
+++ hadoop/common/branches/branch-0.20-security/CHANGES.txt Fri Oct 7 01:52:48 2011
@@ -313,6 +313,9 @@ Release 0.20.205.0 - unreleased
HADOOP-7724. Fixed hadoop-setup-conf.sh to put proxy user in
core-site.xml. (Arpit Gupta via Eric Yang)
+ HDFS-2411. With webhdfs enabled in secure mode the auth to local mappings
+ are not being respected. (jitendra)
+
IMPROVEMENTS
MAPREDUCE-2928. MR-2413 improvements (Eli Collins via mattf)
Modified: hadoop/common/branches/branch-0.20-security/src/core/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java
URL: http://svn.apache.org/viewvc/hadoop/common/branches/branch-0.20-security/src/core/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java?rev=1179919&r1=1179918&r2=1179919&view=diff
==============================================================================
--- hadoop/common/branches/branch-0.20-security/src/core/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java (original)
+++ hadoop/common/branches/branch-0.20-security/src/core/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java Fri Oct 7 01:52:48 2011
@@ -151,9 +151,6 @@ public class KerberosAuthenticationHandl
throw new ServletException("Keytab does not exist: " + keytab);
}
- String nameRules = config.getProperty(NAME_RULES, "DEFAULT");
- KerberosName.setRules(nameRules);
-
Set<Principal> principals = new HashSet<Principal>();
principals.add(new KerberosPrincipal(principal));
Subject subject = new Subject(false, principals, new HashSet<Object>(), new HashSet<Object>());
Modified: hadoop/common/branches/branch-0.20-security/src/hdfs/org/apache/hadoop/hdfs/server/namenode/NameNode.java
URL: http://svn.apache.org/viewvc/hadoop/common/branches/branch-0.20-security/src/hdfs/org/apache/hadoop/hdfs/server/namenode/NameNode.java?rev=1179919&r1=1179918&r2=1179919&view=diff
==============================================================================
--- hadoop/common/branches/branch-0.20-security/src/hdfs/org/apache/hadoop/hdfs/server/namenode/NameNode.java (original)
+++ hadoop/common/branches/branch-0.20-security/src/hdfs/org/apache/hadoop/hdfs/server/namenode/NameNode.java Fri Oct 7 01:52:48 2011
@@ -396,8 +396,6 @@ public class NameNode implements ClientP
DFSConfigKeys.DFS_WEB_AUTHENTICATION_KERBEROS_KEYTAB_KEY,
httpKeytab);
}
- params.put("kerberos.name.rules",
- conf.get("hadoop.security.auth_to_local", "DEFAULT"));
return params;
}
};