{"record":{"id":"29f16da6601016c1","repo":"apache/hadoop","slug":"the-element-of-the-whitelist-s-must-start-with","errorCode":null,"errorMessage":"The element of the whitelist: ${s} must start with '/' and must not contain special characters afterwards","messagePattern":"The element of the whitelist: (.+?) must start with '/' and must not contain special characters afterwards","errorType":"exception","errorClass":"ServletException","httpStatus":null,"severity":"error","filePath":"hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java","lineNumber":196,"sourceCode":"      }\n      String nameRules = config.getProperty(NAME_RULES, null);\n      if (nameRules != null) {\n        KerberosName.setRules(nameRules);\n      }\n      String ruleMechanism = config.getProperty(RULE_MECHANISM, null);\n      if (ruleMechanism != null) {\n        KerberosName.setRuleMechanism(ruleMechanism);\n      }\n\n      final String whitelistStr = config.getProperty(ENDPOINT_WHITELIST, null);\n      if (whitelistStr != null) {\n        final String[] strs = whitelistStr.trim().split(\"\\\\s*[,\\n]\\\\s*\");\n        for (String s: strs) {\n          if (s.isEmpty()) continue;\n          if (ENDPOINT_PATTERN.matcher(s).matches()) {\n            whitelist.add(s);\n          } else {\n            throw new ServletException(\n                \"The element of the whitelist: \" + s + \" must start with '/'\"\n                    + \" and must not contain special characters afterwards\");\n          }\n        }\n      }\n\n      try {\n        gssManager = Subject.doAs(serverSubject,\n            new PrivilegedExceptionAction<GSSManager>() {\n              @Override\n              public GSSManager run() throws Exception {\n                return GSSManager.getInstance();\n              }\n            });\n      } catch (PrivilegedActionException ex) {\n        throw ex.getException();\n      }\n    } catch (Exception ex) {","sourceCodeStart":178,"sourceCodeEnd":214,"githubUrl":"https://github.com/apache/hadoop/blob/2add9630210752f88ceb1bb74eb65e37bf41da8e/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java#L178-L214","documentation":"Error \"The element of the whitelist: ${s} must start with '/' and must not contain special characters afterwards\" thrown in apache/hadoop.","triggerScenarios":"Raised at runtime when the documented precondition or configuration requirement for this operation is violated.","commonSituations":"Misconfigured or missing property, invalid user input, or calling the API before its prerequisites are met.","solutions":["Fix the whitelist entry so it starts with '/' and contains no special characters after the leading slash."],"exampleFix":"Use /status instead of status?* in the whitelist.","handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"2add9630210752f88ceb1bb74eb65e37bf41da8e","analyzedAt":"2026-08-22T19:55:07.957Z","schemaVersion":2},"datasetVersion":"2026-08-22T20:17:22.307Z"}