Details
-
Type:
Improvement
-
Status: Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 3.5.0
-
Fix Version/s: 3.8.0
-
Component/s: app.filebrowser, app.jobbrowser, con.oozie, core.api
-
Labels:None
-
Target Version:
Description
+ CDH5.0.2
+ affect Kerberised environment
Since the introduction of the "requests Kerberos/GSSAPI authentication library"
Is it possible to request an improvement to reduce the noise coming from the above library
Example:
GET /filebrowser/ GET /oozie/ ... [25/Jun/2014 12:33:49 +0200] kerberos_ ERROR handle_other(): Mutual authentication unavailable on 200 response ...
The errors can be safely ignored, however they are generating plenty of noise in the runcpserver.log . It seems like the library log an error when mutual authentication[1,ref:1] is OPTIONAL [2a,b] or if Kerberos negotiation value is empty[3] (in this case HTTP 200/OK response) [ref:2].
[1] https://github.com/cloudera/hue/blob/cdh5-3.5.0_5.0.2/desktop/core/ext-py/requests-kerberos-0.3/requests_kerberos/kerberos_.py#L21
[2a] https://github.com/cloudera/hue/blob/cdh5-3.5.0_5.0.2/desktop/core/src/desktop/lib/rest/http_client.py#L25
[2b] https://github.com/cloudera/hue/blob/cdh5-3.5.0_5.0.2/desktop/core/src/desktop/lib/rest/http_client.py#L88
[3] https://github.com/cloudera/hue/blob/cdh5-3.5.0_5.0.2/desktop/core/ext-py/requests-kerberos-0.3/requests_kerberos/kerberos_.py#L194
[ref:1] "About Mutual Authentication Using Kerberos"
http://msdn.microsoft.com/en-us/library/ms674944(v=vs.85).aspx
[ref:2] Authentication | Negotiate
http://msdn.microsoft.com/en-us/library/windows/desktop/aa364452(v=vs.85).aspx
Note The HTTP Server API appends the mutual authentication data to the final 200 OK response, if one was generated during the authentication handshake.