Return-Path: Delivered-To: apmail-hadoop-common-issues-archive@minotaur.apache.org Received: (qmail 98922 invoked from network); 7 Oct 2010 22:22:53 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 7 Oct 2010 22:22:53 -0000 Received: (qmail 47072 invoked by uid 500); 7 Oct 2010 22:22:53 -0000 Delivered-To: apmail-hadoop-common-issues-archive@hadoop.apache.org Received: (qmail 47008 invoked by uid 500); 7 Oct 2010 22:22:52 -0000 Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: common-issues@hadoop.apache.org Delivered-To: mailing list common-issues@hadoop.apache.org Received: (qmail 46587 invoked by uid 99); 7 Oct 2010 22:22:52 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 07 Oct 2010 22:22:52 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.22] (HELO thor.apache.org) (140.211.11.22) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 07 Oct 2010 22:22:52 +0000 Received: from thor (localhost [127.0.0.1]) by thor.apache.org (8.13.8+Sun/8.13.8) with ESMTP id o97MMVvo007532 for ; Thu, 7 Oct 2010 22:22:32 GMT Message-ID: <8155666.32571286490151977.JavaMail.jira@thor> Date: Thu, 7 Oct 2010 18:22:31 -0400 (EDT) From: "Aaron T. Myers (JIRA)" To: common-issues@hadoop.apache.org Subject: [jira] Commented: (HADOOP-6988) Add support for reading multiple hadoop delegation token files In-Reply-To: <17443930.539541286234913119.JavaMail.jira@thor> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HADOOP-6988?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12919082#action_12919082 ] Aaron T. Myers commented on HADOOP-6988: ---------------------------------------- Even if it's not intended for job submission, it's documented as being the preferred way to pass token files to bin/hadoop for the purpose of running HDFS commands. >From the HDFS user guide: {quote} The HDFS fetchdt command is not a Hadoop shell command. It can be run as 'bin/hadoop fetchdt DTfile'. After you got the token you can run an HDFS command without having Kerberos tickets, by pointing HADOOP_TOKEN_FILE_LOCATION environmental variable to the delegation token file. {quote} Thus, this change could be useful for any HDFS command which is capable of communicating with multiple distinct NNs. > Add support for reading multiple hadoop delegation token files > -------------------------------------------------------------- > > Key: HADOOP-6988 > URL: https://issues.apache.org/jira/browse/HADOOP-6988 > Project: Hadoop Common > Issue Type: Improvement > Components: security > Affects Versions: 0.22.0 > Reporter: Aaron T. Myers > Assignee: Aaron T. Myers > Attachments: hadoop-6988.0.txt, hadoop-6988.1.txt > > > It would be nice if there were a way to specify multiple delegation token files via the HADOOP_TOKEN_FILE_LOCATION environment variable and the "mapreduce.job.credentials.binary" configuration value. I suggest a colon-separated list of paths, each of which is read as a separate delegation token file. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.