Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-16095 Support impersonation for AuthenticationFilter
  3. HADOOP-16287

KerberosAuthenticationHandler Trusted Proxy Support for Knox

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 3.2.0
    • 3.3.0
    • auth
    • None

    Description

      Knox passes doAs with end user while accessing RM, WebHdfs Rest Api. Currently KerberosAuthenticationHandler sets the remote user to Knox. Need Trusted Proxy Support by reading doAs query parameter.

      Attachments

        1. HADOOP-16287-001.patch
          4 kB
          Prabhu Joseph
        2. HADOOP-16287-002.patch
          11 kB
          Prabhu Joseph
        3. HADOOP-16827-003.patch
          13 kB
          Prabhu Joseph
        4. HADOOP-16287-004.patch
          12 kB
          Prabhu Joseph
        5. HADOOP-16287-005.patch
          12 kB
          Prabhu Joseph
        6. HADOOP-16287-006.patch
          17 kB
          Prabhu Joseph
        7. HADOOP-16287-007.patch
          17 kB
          Prabhu Joseph

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-13119 Add ability to secure log servlet using proxy users

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              prabhujoseph Prabhu Joseph
              prabhujoseph Prabhu Joseph
              Votes:
              0 Vote for this issue
              Watchers:
              12 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: