hadoop-common-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Loughran (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HADOOP-14556) S3A to support Delegation Tokens
Date Tue, 20 Jun 2017 16:39:00 GMT
Steve Loughran created HADOOP-14556:

             Summary: S3A to support Delegation Tokens
                 Key: HADOOP-14556
                 URL: https://issues.apache.org/jira/browse/HADOOP-14556
             Project: Hadoop Common
          Issue Type: Sub-task
          Components: fs/s3
            Reporter: Steve Loughran
            Assignee: Steve Loughran

S3A to support delegation tokens where

* authenticated client can request a token via {{FileSystem.getDelegationToken()}}
* STS is used to request short-lived session secret & id; these will be saved in the token
and  marshalled with jobs
* new authentication provider to look for a token for the current user.

This will not support renewals; the lifespan of a token will be limited to the initial duration.
Also, as you can't request an STS token from a temporary session, IAM instances won't be able
to issue tokens.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: common-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-dev-help@hadoop.apache.org

View raw message