hadoop-common-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Xiao Chen (JIRA)" <j...@apache.org>
Subject [jira] [Resolved] (HADOOP-14497) Logs for KMS delegation token lifecycle
Date Sat, 10 Jun 2017 03:39:18 GMT

     [ https://issues.apache.org/jira/browse/HADOOP-14497?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel

Xiao Chen resolved HADOOP-14497.
       Resolution: Done
    Fix Version/s: 3.0.0-alpha4

All sub-tasks are done and the items mentioned in the description is complete. Specifically:
#1 is improved by subtask 4
#4 is added by subtask 2
#2 and #3 already exists.

So I'm closing this jira as done. Thank you for reporting, [~yzhangal], and feel free to reopen
of comment if you think there's anything else we should do here!

> Logs for KMS delegation token lifecycle
> ---------------------------------------
>                 Key: HADOOP-14497
>                 URL: https://issues.apache.org/jira/browse/HADOOP-14497
>             Project: Hadoop Common
>          Issue Type: Improvement
>            Reporter: Yongjun Zhang
>            Assignee: Xiao Chen
>             Fix For: 2.9.0, 3.0.0-alpha4
> We run into quite some customer cases about authentication failures related to KMS delegation
token. It would be nice to see a log for each stage of the token:
> 1. creation
> 2. renewal
> 3. removal upon cancel
> 4. remove upon expiration
> So that when we correlate the logs for the same DT, we can have a good picture about
what's going on, and what could have caused the authentication failure.
> The same is applicable to other delegation tokens.
> NOTE: When log info about delagation token, we don't want leak user's secret info.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: common-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-dev-help@hadoop.apache.org

View raw message