hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jing Zhao (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HADOOP-10215) Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster
Date Thu, 09 Jan 2014 22:55:50 GMT

     [ https://issues.apache.org/jira/browse/HADOOP-10215?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Jing Zhao updated HADOOP-10215:
-------------------------------

    Attachment: HADOOP-10215.000.patch

Looks like we only need to check if the current user is a proxy user before getting a delegation
token. If yes, we should use the real user. Upload a simple patch to fix.

> Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster
> ----------------------------------------------------------------------------------------
>
>                 Key: HADOOP-10215
>                 URL: https://issues.apache.org/jira/browse/HADOOP-10215
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 2.2.0
>            Reporter: Arpit Gupta
>            Assignee: Jing Zhao
>         Attachments: HADOOP-10215.000.patch
>
>
> Noticed this while debugging issues in another application. We saw an error when trying
to do a FileSystem.get using an hftp file system on a secure cluster using a proxy user ugi.
> This is a small snippet used
> {code}
>  FileSystem testFS = ugi.doAs(new PrivilegedExceptionAction<FileSystem>() {
>             @Override
>             public FileSystem run() throws IOException {
>                 return FileSystem.get(hadoopConf);
>             }
>         });
> {code}
> The same code worked for hdfs and webhdfs but not for hftp when the ugi used was UserGroupInformation.createProxyUser



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Mime
View raw message