Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: common-issues@hadoop.apache.org
Date: Tue, 21 Oct 2014 03:14:33 +0000 (UTC)
From: "Zhijie Shen (JIRA)" <jira@apache.org>
To: common-issues@hadoop.apache.org
Message-ID: <JIRA.12749416.1413861240000.302339.1413861273880@Atlassian.JIRA>
In-Reply-To: <JIRA.12749416.1413861240000@Atlassian.JIRA>
References: <JIRA.12749416.1413861240000@Atlassian.JIRA>
 <JIRA.12749416.1413861240377@arcas>
Subject: [jira] [Created] (HADOOP-11215) DT management ops in
 DelegationTokenAuthenticatedURL assume the authenticator is
 KerberosDelegationTokenAuthenticator
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Zhijie Shen created HADOOP-11215:
------------------------------------

             Summary: DT management ops in DelegationTokenAuthenticatedURL assume the authenticator is KerberosDelegationTokenAuthenticator
                 Key: HADOOP-11215
                 URL: https://issues.apache.org/jira/browse/HADOOP-11215
             Project: Hadoop Common
          Issue Type: Bug
            Reporter: Zhijie Shen


Here's the code in get/renew/cancel DT:
{code}
      return ((KerberosDelegationTokenAuthenticator) getAuthenticator()).
          renewDelegationToken(url, token, token.delegationToken, doAsUser);
{code}

It seems not to be right because PseudoDelegationTokenAuthenticator should work here as well. At least, it is inconsistent in the context of delegation token authentication, as DelegationTokenAuthenticationHandler doesn't require the authentication must be Kerberos. 


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)