hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Daryn Sharp (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-8726) The Secrets in Credentials are not available to MR tasks
Date Mon, 27 Aug 2012 15:56:08 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-8726?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13442486#comment-13442486
] 

Daryn Sharp commented on HADOOP-8726:
-------------------------------------

This doesn't work.  Tokens can be added directly to the UGI and this patch won't return them.
 A new {{UGI}} wrapping the {{Subject}} also won't "see" its tokens.  The {{Credentials}}
needs to be constructed from the {{Subject}}.

I think the correct approach is for {{UGI#getCredentials}} to also extract the secrets from
the {{Subject}}.  While working on HADOOP-8225 I noticed the secrets aren't propagate, but
I didn't address the issue since I wasn't sure what impact it might have.
                
> The Secrets in Credentials are not available to MR tasks
> --------------------------------------------------------
>
>                 Key: HADOOP-8726
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8726
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>            Reporter: Benoy Antony
>         Attachments: HADOOP-8726.patch
>
>
> Though secrets are passed in Credentials, the secrets are not available to the MR tasks.
> This issue  exists with security on/off. 
> This is related to the change in HADOOP-8225

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message