Kihwal Lee
deae1f8323
HADOOP-11859. PseudoAuthenticationHandler fails with httpcomponents v4.4. Contributed by Eugene Koifman.
...
(cherry picked from commit db4419df6bc72e9a1ddd90bac4dd7dcf0fb05479)
2016-12-09 11:05:04 -06:00
Zhe Zhang
13414be1a1
HDFS-9888. Allow reseting KerberosName in unit tests. Contributed by Xiao Chen.
...
(cherry picked from commit 3e8099a45a4cfd4c5c0e3dce4370514cb2c90da9)
(cherry picked from commit 00ff3d737c71e1a228ede64a6b9abd5227ef2117)
(cherry picked from commit 9c1c48c0d44a45c4f96e8d60cfa6453a85523905)
2016-08-11 16:40:02 -07:00
Akira Ajisaka
480b01ba95
HADOOP-12902. JavaDocs for SignerSecretProvider are out-of-date in AuthenticationFilter. Contributed by Gabor Liptak.
...
(cherry picked from commit acca149ec96f2932bebc492452a63a159de9ce47)
(cherry picked from commit b4fbc22688124020e90be04827d0f8b35bbe50bb)
2016-03-31 16:07:22 +09:00
Akira Ajisaka
8f1dd57e61
HADOOP-11663. Remove description about Java 6 from docs. Contributed by Masatake Iwasaki.
...
(cherry picked from commit b9cebfc0ba871beb99f634a1a8c797e143ecc6d4)
(cherry picked from commit 77587fe198ecba52673db24a0f9887fd02ce0a62)
2015-05-12 00:32:24 +09:00
Jason Lowe
2419861cac
HADOOP-11868. Invalid user logins trigger large backtraces in server log. Contributed by Chang Li
...
(cherry picked from commit 0ebe84d30af2046775884c9fb1e054da31582657)
2015-04-22 20:58:27 +00:00
Haohui Mai
7569289e99
HADOOP-11837. AuthenticationFilter should destroy SignerSecretProvider in Tomcat deployments. Contributed by Bowen Zhang.
2015-04-17 11:00:14 -07:00
Haohui Mai
530c2ef91a
HADOOP-11754. RM fails to start in non-secure mode due to authentication filter failure. Contributed by Haohui Mai.
2015-03-30 11:45:11 -07:00
Haohui Mai
d481a8d79b
HADOOP-11748. The secrets of auth cookies should not be specified in configuration in clear text. Contributed by Li Lu and Haohui Mai.
2015-03-26 17:35:54 -07:00
Haohui Mai
2e9c690e90
Addendum for HADOOP-10670.
2015-03-25 12:31:03 -07:00
Haohui Mai
28095c26f7
HADOOP-10670. Allow AuthenticationFilters to load secret from signature secret files. Contributed by Kai Zheng.
2015-03-25 12:30:58 -07:00
Haohui Mai
245f7b2a77
HADOOP-11633. Convert remaining branch-2 .apt.vm files to markdown. Contributed by Masatake Iwasaki.
2015-03-11 14:31:16 -07:00
Tsuyoshi Ozawa
28f4e6b222
HADOOP-11602. Backport 'Fix toUpperCase/toLowerCase to use Locale.ENGLISH.' (ozawa)
...
(cherry picked from commit b46f9e72dbed6fd1f8cae1e12973252462d6ee15)
2015-03-09 19:54:45 +09:00
Robert Kanter
ebf6499498
HADOOP-11467. KerberosAuthenticator can connect to a non-secure cluster. (yzhangal via rkanter)
...
(cherry picked from commit 875256834b892b574499d5fe68f95a9aed244f7d)
Conflicts:
hadoop-common-project/hadoop-auth/src/test/java/org/apache/hadoop/security/authentication/server/TestAuthenticationToken.java
hadoop-common-project/hadoop-common/CHANGES.txt
2015-02-13 14:12:38 -08:00
Haohui Mai
b68d51e898
HADOOP-11379. Fix new findbugs warnings in hadoop-auth*. Contributed by Li Lu.
2014-12-09 13:09:01 -08:00
Steve Loughran
2bc3f1064f
HADOOP-10134 [JDK8] Fix Javadoc errors caused by incorrect or illegal tags in doc comments.
2014-12-09 11:15:19 +00:00
Aaron T. Myers
534a021e70
HADOOP-11332. KerberosAuthenticator#doSpnegoSequence should check if kerberos TGT is available in the subject. Contributed by Dian Fu.
...
(cherry picked from commit 9d1a8f5897d585bec96de32116fbd2118f8e0f95)
2014-12-03 18:54:26 -08:00
Aaron T. Myers
d698ed1d6f
HADOOP-11187 NameNode - KMS communication fails after a long period of inactivity. Contributed by Arun Suresh.
...
(cherry picked from commit d593035d50e9997f31ddd67275b6e68504f9ca3c)
2014-11-05 18:17:43 -08:00
Aaron T. Myers
e96f0c6aae
HADOOP-11272. Allow ZKSignerSecretProvider and ZKDelegationTokenSecretManager to use the same curator client. Contributed by Arun Suresh.
...
(cherry picked from commit 8a261e68e4177b47be01ceae7310ea56aeb7ca38)
2014-11-05 17:47:49 -08:00
cnauroth
b4446cb370
HADOOP-11068. Match hadoop.auth cookie format to jetty output. Contributed by Gregory Chanan.
...
(cherry picked from commit 5c900b522e70b512498ab7689f56eb1c5e4b963f)
2014-10-29 11:21:37 -07:00
Andrew Wang
9ebff016c2
HADOOP-11151. Automatically refresh auth token and retry on auth failure. Contributed by Arun Suresh.
...
(cherry picked from commit 2d8e6e2c4a52a4ba815b23d6d1ac21be4df23d9e)
2014-10-02 19:59:56 -07:00
Alejandro Abdelnur
897ced1a20
HADOOP-11017. KMS delegation token secret manager should be able to use zookeeper as store. (asuresh via tucu)
...
(cherry picked from commit db890eef3208cc557476fa510f7a253ba22bc68a)
Conflicts:
hadoop-project/pom.xml
2014-09-20 08:24:34 -07:00
Alejandro Abdelnur
1023196cea
HADOOP-10868. Addendum
2014-09-15 19:39:12 -07:00
Alejandro Abdelnur
e59f6771e8
HADOOP-10868. AuthenticationFilter should support externalizing the secret for signing and provide rotation support. (rkanter via tucu)
2014-09-15 17:10:43 -07:00
Alejandro Abdelnur
54202383a9
HADOOP-10911. hadoop.auth cookie after HADOOP-10710 still not proper according to RFC2109. (gchanan via tucu)
...
(cherry picked from commit 6040810df82669f140033d3c6366892640798671)
Conflicts:
hadoop-project/pom.xml
2014-08-29 11:23:14 -07:00
Alejandro Abdelnur
ff6ef4a430
HADOOP-10835. Implement HTTP proxyuser support in HTTP authentication client/server libraries. (tucu)
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1617385 13f79535-47bb-0310-9956-ffa450edef68
2014-08-12 00:11:55 +00:00
Alejandro Abdelnur
481ac00c65
HADOOP-10771. Refactor HTTP delegation support out of httpfs to common, PART 2. (tucu)
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1616674 13f79535-47bb-0310-9956-ffa450edef68
2014-08-08 05:01:12 +00:00
Alejandro Abdelnur
891d93bbcf
HADOOP-10791. AuthenticationFilter should support externalizing the secret for signing and provide rotation support. (rkanter via tucu)
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1616006 13f79535-47bb-0310-9956-ffa450edef68
2014-08-05 21:25:22 +00:00
Alejandro Abdelnur
959f5ae65c
HADOOP-10710. hadoop.auth cookie is not properly constructed according to RFC2109. (Juan Yu via tucu)
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1606925 13f79535-47bb-0310-9956-ffa450edef68
2014-06-30 20:42:40 +00:00
Vinayakumar B
8c19ff9192
Merged revision(s) 1605049 from hadoop/common/trunk:
...
HADOOP-10665. Make Hadoop Authentication Handler loads case in-sensitive (Contributed by Benoy Antony)
........
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1605050 13f79535-47bb-0310-9956-ffa450edef68
2014-06-24 10:32:53 +00:00
Chris Nauroth
ecfea82647
HADOOP-10702. Merging change r1603023 from trunk to branch-2.
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1603024 13f79535-47bb-0310-9956-ffa450edef68
2014-06-16 23:11:34 +00:00
Chris Nauroth
7895ecccac
HADOOP-10602. Merging change r1598337 from trunk to branch-2.
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1598338 13f79535-47bb-0310-9956-ffa450edef68
2014-05-29 17:33:10 +00:00
Kihwal Lee
76bfc73cc9
svn merge -c 1593362 merging from trunk to branch-2 to fix:HADOOP-10158. SPNEGO should work with multiple interfaces/SPNs. Contributed by Daryn Sharp.
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1593363 13f79535-47bb-0310-9956-ffa450edef68
2014-05-08 18:28:22 +00:00
Alejandro Abdelnur
2d683525d2
HADOOP-10566. Add toLowerCase support to auth_to_local rules for service name. (tucu)
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1593106 13f79535-47bb-0310-9956-ffa450edef68
2014-05-07 18:22:12 +00:00
Kihwal Lee
7746dbe28c
svn merge -c 1590637 merging from trunk to branch-2 to fix:HADOOP-10322. Add ability to read principal names from a keytab. Contributed by Benoy Antony and Daryn Sharp.
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1590639 13f79535-47bb-0310-9956-ffa450edef68
2014-04-28 13:54:48 +00:00
Jing Zhao
0da50f6074
HADOOP-10301. Merge r1582883 from trunk.
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1582884 13f79535-47bb-0310-9956-ffa450edef68
2014-03-28 21:22:39 +00:00
Arpit Agarwal
bb7e14902b
HADOOP-10394. Merging r1576145 from trunk to branch-2.
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1576146 13f79535-47bb-0310-9956-ffa450edef68
2014-03-11 00:03:11 +00:00
Tsz-wo Sze
325f94b36a
svn merge -c 1575470 from trunk for HADOOP-10393. Fix the javac warnings in hadoop-auth.
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1575471 13f79535-47bb-0310-9956-ffa450edef68
2014-03-08 02:19:12 +00:00
Haohui Mai
4cc5a8dbdb
Merge r1574283 from trunk
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1574284 13f79535-47bb-0310-9956-ffa450edef68
2014-03-05 01:50:28 +00:00
Arpit Agarwal
bca2735ffa
HADOOP-9982. Merge r1561813 from trunk to branch-2
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1561815 13f79535-47bb-0310-9956-ffa450edef68
2014-01-27 19:53:26 +00:00
Alejandro Abdelnur
c1d92ca03e
HADOOP-10193. hadoop-auth's PseudoAuthenticationHandler can consume getInputStream. (gchanan via tucu)
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1555957 13f79535-47bb-0310-9956-ffa450edef68
2014-01-06 18:14:14 +00:00
Jing Zhao
7e10509fe4
HDFS-3987. Merge change r1543962 from trunk.
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1543967 13f79535-47bb-0310-9956-ffa450edef68
2013-11-20 22:00:32 +00:00
Alejandro Abdelnur
0c220f30b3
HADOOP-10078. KerberosAuthenticator always does SPNEGO. (rkanter via tucu)
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1541721 13f79535-47bb-0310-9956-ffa450edef68
2013-11-13 21:13:18 +00:00
Tsz-wo Sze
95c4570eb1
HADOOP-9899. Remove the debug message, added by HADOOP-8855, from KerberosAuthenticator.
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1516745 13f79535-47bb-0310-9956-ffa450edef68
2013-08-23 08:40:15 +00:00
Alejandro Abdelnur
32bdd011ef
HADOOP-9866. convert hadoop-auth testcases requiring kerberos to use minikdc. (ywskycn via tucu)
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1515658 13f79535-47bb-0310-9956-ffa450edef68
2013-08-19 23:04:23 +00:00
Luke Lu
8a7cec29fe
HADOOP-9446. Support Kerberos SPNEGO for IBM JDK. (Yu Gao via llu)
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1513688 13f79535-47bb-0310-9956-ffa450edef68
2013-08-13 23:13:07 +00:00
Daryn Sharp
8e2098fd2f
svn merge -c 1457763 FIXES: HADOOP-9299. kerberos name resolution is kicking in even when kerberos is not configured (daryn)
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1457770 13f79535-47bb-0310-9956-ffa450edef68
2013-03-18 14:05:09 +00:00
Alejandro Abdelnur
3ff00d4aaa
HADOOP-9054. Add AuthenticationHandler that uses Kerberos but allows for an alternate form of authentication for browsers. (rkanter via tucu)
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1418432 13f79535-47bb-0310-9956-ffa450edef68
2012-12-07 18:49:32 +00:00
Alejandro Abdelnur
4b27351435
HADOOP-8883. Anonymous fallback in KerberosAuthenticator is broken. (rkanter via tucu)
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1398897 13f79535-47bb-0310-9956-ffa450edef68
2012-10-16 17:43:54 +00:00
Suresh Srinivas
b14cec5cc1
HADOOP-8878. Merge change 1396922 from trunk
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1396923 13f79535-47bb-0310-9956-ffa450edef68
2012-10-11 06:33:33 +00:00
Eli Collins
1e1591788d
HADOOP-8855. SSL-based image transfer does not work when Kerberos is disabled. Contributed by Todd Lipcon
...
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-2@1390843 13f79535-47bb-0310-9956-ffa450edef68
2012-09-27 05:08:06 +00:00