Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 335C9200BDB for ; Mon, 12 Dec 2016 09:22:03 +0100 (CET) Received: by cust-asf.ponee.io (Postfix) id 31D82160B22; Mon, 12 Dec 2016 08:22:03 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 79470160B0D for ; Mon, 12 Dec 2016 09:22:02 +0100 (CET) Received: (qmail 29418 invoked by uid 500); 12 Dec 2016 08:22:01 -0000 Mailing-List: contact dev-help@atlas.incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@atlas.incubator.apache.org Delivered-To: mailing list dev@atlas.incubator.apache.org Received: (qmail 29407 invoked by uid 99); 12 Dec 2016 08:22:01 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd4-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 12 Dec 2016 08:22:01 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd4-us-west.apache.org (ASF Mail Server at spamd4-us-west.apache.org) with ESMTP id 1610DC0370 for ; Mon, 12 Dec 2016 08:22:01 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd4-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -6.219 X-Spam-Level: X-Spam-Status: No, score=-6.219 tagged_above=-999 required=6.31 tests=[KAM_ASCII_DIVIDERS=0.8, KAM_LAZY_DOMAIN_SECURITY=1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-2.999] autolearn=disabled Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd4-us-west.apache.org [10.40.0.11]) (amavisd-new, port 10024) with ESMTP id VHxpMqNXB8NC for ; Mon, 12 Dec 2016 08:22:00 +0000 (UTC) Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with SMTP id B91CA5F1A1 for ; Mon, 12 Dec 2016 08:21:59 +0000 (UTC) Received: (qmail 29312 invoked by uid 99); 12 Dec 2016 08:21:58 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 12 Dec 2016 08:21:58 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id B5AE82C0086 for ; Mon, 12 Dec 2016 08:21:58 +0000 (UTC) Date: Mon, 12 Dec 2016 08:21:58 +0000 (UTC) From: "Vipin Rathor (JIRA)" To: dev@atlas.incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (ATLAS-1340) Credential Provider utility does not work with fully qualified local/HDFS jceks path MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Mon, 12 Dec 2016 08:22:03 -0000 [ https://issues.apache.org/jira/browse/ATLAS-1340?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15741295#comment-15741295 ] Vipin Rathor commented on ATLAS-1340: ------------------------------------- Thanks [~svimal2106] ! > Credential Provider utility does not work with fully qualified local/HDFS jceks path > ------------------------------------------------------------------------------------ > > Key: ATLAS-1340 > URL: https://issues.apache.org/jira/browse/ATLAS-1340 > Project: Atlas > Issue Type: Bug > Affects Versions: trunk > Reporter: Vipin Rathor > Priority: Minor > Labels: patch, security > Fix For: trunk > > Attachments: ATLAS-1340-v2.patch, fix-hdfs-credProvider.patch > > > At present the Atlas Credential Provider utility (./bin/cputil.py) does not work with credential provider path like jceks://file/local/file/path/file.jceks or jceks://hdfs@namenodehost:port/path/in/hdfs/to/file.jceks as mentioned in documentation page at http://atlas.apache.org/Security.html (section: Credential Provider Utility Script) > Current Behavior: > cputil.py always creates a credential provider file in local file system at root directory as follows: > 1. For the input "jceks://file/local/file/path/file.jceks", > file created => /jceks:/file/local/file/path/file.jceks > 2. For the input "jceks://hdfs@namenode.com:8020/path/in/hdfs/to/file.jceks", > file created => /jceks:/hdfs@namenode.com:8020/path/in/hdfs/to/file.jceks on local file system > Expected Behavior: > 1. For the input "jceks://file/local/file/path/file.jceks", > file created should be /local/file/path/file.jceks > 2. For the input "jceks://hdfs@namenode.com:8020/path/in/hdfs/to/file.jceks", > file created should be /path/in/hdfs/to/file.jceks on the specified HDFS file system. > Steps to re-create: > 1. Run ./bin/cputil.py and provide fully qualified path to jceks file as described above. > Attached is a patch to fix this issue. Tested with both local and HDFS jceks credential provider path. -- This message was sent by Atlassian JIRA (v6.3.4#6332)