hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Benoy Antony (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HADOOP-10566) Refactor proxyservers out of ProxyUsers
Date Fri, 02 May 2014 06:31:19 GMT

     [ https://issues.apache.org/jira/browse/HADOOP-10566?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Benoy Antony updated HADOOP-10566:
----------------------------------

    Description: 
HADOOP-10498 added proxyserversfeature in ProxyUsers. It is beneficial to treat this as a
separate feature since 

1> The ProxyUsers is per proxyuser where as proxyservers is per cluster. The cardinality
is different. 

2> The ProxyUsers.authorize() and ProxyUsers.isproxyUser() are synchronized and hence share
the same lock  and impacts performance.

Since these are two separate features, it will be an improvement to keep them separate. It
also enables one to fine-tune each feature independently.


  was:
HADOOP-10498 added proxyserversfeature in ProxyUsers. It is beneficial to treat this as a
separate feature since 

1> The ProxyUsers is per proxyuser where as proxyservers is per cluster. The cardinality
is different. 

2> The ProxyUser.authorize() and isproxyUser are synchronized and hence share the same
lock  and impacts performance.

Since these are two separate features, it will be an improvement to keep them separate. It
also enables one to fine-tune each feature independently.



> Refactor proxyservers out of ProxyUsers
> ---------------------------------------
>
>                 Key: HADOOP-10566
>                 URL: https://issues.apache.org/jira/browse/HADOOP-10566
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>            Reporter: Benoy Antony
>            Assignee: Benoy Antony
>         Attachments: HADOOP-10566.patch
>
>
> HADOOP-10498 added proxyserversfeature in ProxyUsers. It is beneficial to treat this
as a separate feature since 
> 1> The ProxyUsers is per proxyuser where as proxyservers is per cluster. The cardinality
is different. 
> 2> The ProxyUsers.authorize() and ProxyUsers.isproxyUser() are synchronized and hence
share the same lock  and impacts performance.
> Since these are two separate features, it will be an improvement to keep them separate.
It also enables one to fine-tune each feature independently.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message