Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-14060

HTTP servlet /logs should require authentication and authorization

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Reopened
    • Critical
    • Resolution: Unresolved
    • 3.0.0-alpha4
    • None
    • kms
    • None

    Description

      HADOOP-14047 makes KMS call HttpServer2#setACL. Access control works fine for /conf, /jmx, /logLevel, and /stacks, but not for /logs.

      The code in AdminAuthorizedServlet#doGet for /logs and ConfServlet#doGet for /conf are quite similar. This makes me believe that /logs should subject to the same access control as intended by the original developer.

      IMHO this could either be my misconfiguration or there is a bug somewhere in HttpServer2.

      Attachments

        1. HADOOP-14060-tmp.001.patch
          1 kB
          Yuanbo Liu

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-13119 Add ability to secure log servlet using proxy users

          • Major - Major loss of function.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-14077 Improve the patch of HADOOP-13119

          • Major - Major loss of function.
          • Resolved
          relates to

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-14047 Require admin to access KMS instrumentation servlets

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          New Feature - A new feature of the product, which has yet to be developed. HDFS-10860 Switch HttpFS from Tomcat to Jetty

          • Blocker - Blocks development and/or testing work, production could not run
          • Resolved

          Activity

            People

              Unassigned Unassigned
              jzhuge John Zhuge
              Votes:
              0 Vote for this issue
              Watchers:
              14 Start watching this issue

              Dates

                Created:
                Updated: