Uh oh!
There was an error while loading. Please reload this page.
HBASE-27693 Support for Hadoop's LDAP Authentication mechanism (Web UI only) - #5144
Conversation
Apache-HBase
commented
Mar 27, 2023
💔 -1 overall
This message was automatically generated. |
Apache-HBase
commented
Mar 27, 2023
💔 -1 overall
This message was automatically generated. |
Apache-HBase
commented
Mar 27, 2023
💔 -1 overall
This message was automatically generated. |
Apache-HBase
commented
Mar 27, 2023
🎊 +1 overall
This message was automatically generated. |
Apache-HBase
commented
Mar 27, 2023
🎊 +1 overall
This message was automatically generated. |
Apache-HBase
commented
Mar 27, 2023
💔 -1 overall
This message was automatically generated. |
Apache-HBase
commented
Mar 31, 2023
💔 -1 overall
This message was automatically generated. |
| <description>HTTP functionality for HBase Servers</description> | ||
| <properties> | ||
| <!-- Required for testing LDAP integration --> | ||
| <apacheds.version>2.0.0.AM26</apacheds.version> |
This comment was marked as resolved.
This comment was marked as resolved.
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
| * Initializes hadoop-auth AuthenticationFilter which provides support for Kerberos HTTP SPNEGO | ||
| * authentication. | ||
| * <p> | ||
| * It enables anonymous access, simple/pseudo and Kerberos HTTP SPNEGO authentication for Hadoop |
This comment was marked as resolved.
This comment was marked as resolved.
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
There was a problem hiding this comment.
Could others please suggest on this?
Uh oh!
There was an error while loading. Please reload this page.
Apache-HBase
commented
Mar 31, 2023
💔 -1 overall
This message was automatically generated. |
Apache-HBase
commented
Mar 31, 2023
🎊 +1 overall
This message was automatically generated. |
Apache-HBase
commented
Mar 31, 2023
🎊 +1 overall
This message was automatically generated. |
Apache-HBase
commented
Mar 31, 2023
🎊 +1 overall
This message was automatically generated. |
Apache-HBase
commented
Apr 4, 2023
🎊 +1 overall
This message was automatically generated. |
|
Apache-HBase
commented
Apr 4, 2023
💔 -1 overall
This message was automatically generated. |
Apache-HBase
commented
Apr 4, 2023
💔 -1 overall
This message was automatically generated. |
ydodeja365
commented
Apr 6, 2023
Failures in pipeline are not relevant to this commit. |
Apache9
commented
Apr 12, 2023
This is only for http? |
No, this was tested on different HBase UIs running on both HTTP/HTTPS. It is a layer for HBase UI only. |
| <scope>test</scope> | ||
| </dependency> | ||
| <dependency> | ||
| <groupId>org.apache.directory.server</groupId> |
There was a problem hiding this comment.
Just a comment.
I am a little concerned to include apache directory server. It's a big project with lots of dependencies, and there's been no release over 3 years. Very likely this dependency is going to to introduce transitive dependency versions know to be vulnerable. The apache directory server quarterly report last October mentioned a new release is coming up but nothing happens yet.
I understand this is for test scope only, so this is not a real issue.
Uh oh!
There was an error while loading. Please reload this page.
jojochuang
commented
Apr 17, 2023
I don't recall how the Hadoop's authentication filter works. But I assume it ultimately uses Hadoop's LdapAuthenticationHandler to implement the core functionality? |
ydodeja365
commented
Apr 17, 2023
Yes, it will instantiate AuthenticationFilter which will further use LdapAuthenticationHandler to implement core functionality. |
Apache-HBase
commented
Apr 19, 2023
🎊 +1 overall
This message was automatically generated. |
ydodeja365
commented
Apr 19, 2023
Addressed all the review comments. Please let me know if this looks good. Thank you @Apache9@jojochuang@NihalJain for the review. |
Apache-HBase
commented
Apr 19, 2023
🎊 +1 overall
This message was automatically generated. |
Apache-HBase
commented
Apr 19, 2023
💔 -1 overall
This message was automatically generated. |
Apache9
commented
Apr 27, 2023
Sorry I did not make it clear. I mean this is only for http/https, not for rpc, right? And you have already answered that this is for UI only. |
ydodeja365
commented
Apr 27, 2023
Thank you for your response. Yes, it is not for RPC. |
NihalJain
commented
Apr 27, 2023
+1 (non-binding) |
NihalJain
commented
Apr 27, 2023
nit: we could update jira description to capture its for web ui to avoid any confusion. Also @ydodeja365 please update release note in jira, once changes are merged. |
Apache9
commented
Apr 28, 2023
I'm not very familiar with this area... Anyway, you've already gotten a +1 from a committer :) |
jojochuang
commented
Apr 28, 2023
@ydodeja365 if you'd like this feature in branch-2 (HBase 2.6.0) can you submit another PR against branch-2? This feature has dependency on Hadoop so I'd like to have it run through precommit to make sure it doesn't break with Hadoop 2 runtime. |
ydodeja365
commented
May 2, 2023
@jojochuang Raised PR for the same, there were some conflicts with this exact commit, so raised with similar changes: #5213 |
…ation mechanism (Web UI only)" to branch-2 (#5144) (#5680) * Fix failure in pre-commit checks for Yetus JDK8 Hadoop2 due to missing class SchemaLdifExtractor in ApacheDS 2.0.0.AM26. The issue arises from an overridden ApacheDS version incompatible with Hadoop 2. To resolve, skip LDAP tests for Hadoop 2 and apply dependency changes only for Hadoop 3. Co-authored-by: Yash Dodeja <yashdodeja@yahoo.com> Signed-off-by: Nick Dimiduk <ndimiduk@apache.org>
…ation mechanism (Web UI only)" to branch-2 (#5144) (#7021) * Fix failure in pre-commit checks for Yetus JDK8 Hadoop2 due to missing class SchemaLdifExtractor in ApacheDS 2.0.0.AM26. The issue arises from an overridden ApacheDS version incompatible with Hadoop 2. To resolve, skip LDAP tests for Hadoop 2 and apply dependency changes only for Hadoop 3. Co-authored-by: Yash Dodeja <yashdodeja@yahoo.com> Signed-off-by: Nick Dimiduk <ndimiduk@apache.org>
…ation mechanism (Web UI only)" to branch-2 (#5144) (#7022) * Fix failure in pre-commit checks for Yetus JDK8 Hadoop2 due to missing class SchemaLdifExtractor in ApacheDS 2.0.0.AM26. The issue arises from an overridden ApacheDS version incompatible with Hadoop 2. To resolve, skip LDAP tests for Hadoop 2 and apply dependency changes only for Hadoop 3. Co-authored-by: Yash Dodeja <yashdodeja@yahoo.com> Signed-off-by: Nick Dimiduk <ndimiduk@apache.org>
…ation mechanism (Web UI only)" to branch-2 (apache#5144) (apache#5680) * Fix failure in pre-commit checks for Yetus JDK8 Hadoop2 due to missing class SchemaLdifExtractor in ApacheDS 2.0.0.AM26. The issue arises from an overridden ApacheDS version incompatible with Hadoop 2. To resolve, skip LDAP tests for Hadoop 2 and apply dependency changes only for Hadoop 3. Co-authored-by: Yash Dodeja <yashdodeja@yahoo.com> Signed-off-by: Nick Dimiduk <ndimiduk@apache.org>
No description provided.