hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Loughran (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HADOOP-10776) Open up already widely-used APIs for delegation-token fetching & renewal to ecosystem projects
Date Thu, 24 Nov 2016 17:57:59 GMT

     [ https://issues.apache.org/jira/browse/HADOOP-10776?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Steve Loughran updated HADOOP-10776:
------------------------------------
       Resolution: Fixed
    Fix Version/s: 2.8.0
           Status: Resolved  (was: Patch Available)

> Open up already widely-used APIs for delegation-token fetching & renewal to ecosystem
projects
> ----------------------------------------------------------------------------------------------
>
>                 Key: HADOOP-10776
>                 URL: https://issues.apache.org/jira/browse/HADOOP-10776
>             Project: Hadoop Common
>          Issue Type: Improvement
>            Reporter: Robert Joseph Evans
>            Assignee: Vinod Kumar Vavilapalli
>            Priority: Blocker
>             Fix For: 2.8.0
>
>         Attachments: HADOOP-10776-20160822.txt, HADOOP-10776-branch-2-002.patch, HADOOP-10776-branch-2-003.patch
>
>
> Storm would like to be able to fetch delegation tokens and forward them on to running
topologies so that they can access HDFS (STORM-346).  But to do so we need to open up access
to some of APIs. 
> Most notably FileSystem.addDelegationTokens(), Token.renew, Credentials.getAllTokens,
and UserGroupInformation but there may be others.
> At a minimum adding in storm to the list of allowed API users. But ideally making them
public. Restricting access to such important functionality to just MR really makes secure
HDFS inaccessible to anything except MR, or tools that reuse MR input formats.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org


Mime
View raw message