hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Santhosh G Nayak (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HADOOP-14351) Azure: RemoteWasbAuthorizerImpl and RemoteSASKeyGeneratorImpl use Kerberos interactive user cache
Date Tue, 25 Apr 2017 15:54:04 GMT
Santhosh G Nayak created HADOOP-14351:
-----------------------------------------

             Summary: Azure: RemoteWasbAuthorizerImpl and RemoteSASKeyGeneratorImpl use Kerberos
interactive user cache
                 Key: HADOOP-14351
                 URL: https://issues.apache.org/jira/browse/HADOOP-14351
             Project: Hadoop Common
          Issue Type: Bug
          Components: fs/azure
    Affects Versions: 2.9.0
            Reporter: Santhosh G Nayak
            Assignee: Santhosh G Nayak


Currently, {{RemoteWasbAuthorizerImpl.getRelativeBlobSASUri()}},  {{RemoteWasbAuthorizerImpl.getContainerSASUri()}}
and {{RemoteSASKeyGeneratorImpl.authorize()}} use Kerberos interactive user's ticket cache
if the kerberos credential is not available for {{UserGroupInformation.getCurrentUser()}}
or {{UserGroupInformation.getRealUser()}}.
It results in usage of interactive user's ticket for impersonation, whenever services try
to do File System operations as another user, which is incorrect.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org


Mime
View raw message