Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id C83A3200CD3 for ; Fri, 14 Jul 2017 00:36:10 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id C686C16D057; Thu, 13 Jul 2017 22:36:10 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 17F4116D055 for ; Fri, 14 Jul 2017 00:36:09 +0200 (CEST) Received: (qmail 88259 invoked by uid 500); 13 Jul 2017 22:36:09 -0000 Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list common-issues@hadoop.apache.org Received: (qmail 88246 invoked by uid 99); 13 Jul 2017 22:36:09 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 13 Jul 2017 22:36:09 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id C05921806BE for ; Thu, 13 Jul 2017 22:36:08 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -99.202 X-Spam-Level: X-Spam-Status: No, score=-99.202 tagged_above=-999 required=6.31 tests=[KAM_ASCII_DIVIDERS=0.8, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=disabled Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id mp9wDQg8iIuZ for ; Thu, 13 Jul 2017 22:36:08 +0000 (UTC) Received: from mailrelay1-us-west.apache.org (mailrelay1-us-west.apache.org [209.188.14.139]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTP id 0DA185FDBF for ; Thu, 13 Jul 2017 22:36:07 +0000 (UTC) Received: from jira-lw-us.apache.org (unknown [207.244.88.139]) by mailrelay1-us-west.apache.org (ASF Mail Server at mailrelay1-us-west.apache.org) with ESMTP id 56673E0DEA for ; Thu, 13 Jul 2017 22:36:05 +0000 (UTC) Received: from jira-lw-us.apache.org (localhost [127.0.0.1]) by jira-lw-us.apache.org (ASF Mail Server at jira-lw-us.apache.org) with ESMTP id 2DD0424766 for ; Thu, 13 Jul 2017 22:36:02 +0000 (UTC) Date: Thu, 13 Jul 2017 22:36:02 +0000 (UTC) From: "Rushabh S Shah (JIRA)" To: common-issues@hadoop.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Comment Edited] (HADOOP-14578) Bind IPC connections to kerberos UPN host for proxy users MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Thu, 13 Jul 2017 22:36:11 -0000 [ https://issues.apache.org/jira/browse/HADOOP-14578?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16086533#comment-16086533 ] Rushabh S Shah edited comment on HADOOP-14578 at 7/13/17 10:35 PM: ------------------------------------------------------------------- [~daryn]: +1 for the patch. It applies cleanly to trunk..I think HadoopQA didnt run at all on trunk. can you please refresh the branch-2/branch-2.8 patch. was (Author: shahrs87): [~daryn]: +1 for the patch. It applies cleanly to trunk..I think HadoopQA didnt run at all on trunk. can you please refresh the patch. > Bind IPC connections to kerberos UPN host for proxy users > --------------------------------------------------------- > > Key: HADOOP-14578 > URL: https://issues.apache.org/jira/browse/HADOOP-14578 > Project: Hadoop Common > Issue Type: Bug > Components: ipc > Affects Versions: 2.0.0-alpha > Reporter: Daryn Sharp > Assignee: Daryn Sharp > Attachments: HADOOP-14578.branch-2.8.patch, HADOOP-14578.patch > > > The IPC client will only bind to a kerberos UPN host for the effective user. For proxy users, it does not bind to the authenticating real user's UPN host. This is inconsistent and prevents strict host checking of connection. -- This message was sent by Atlassian JIRA (v6.4.14#64029) --------------------------------------------------------------------- To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org For additional commands, e-mail: common-issues-help@hadoop.apache.org