Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 96DD9200CD0 for ; Tue, 25 Jul 2017 18:16:08 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 9553C16708B; Tue, 25 Jul 2017 16:16:08 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id D0707167089 for ; Tue, 25 Jul 2017 18:16:07 +0200 (CEST) Received: (qmail 52708 invoked by uid 500); 25 Jul 2017 16:16:06 -0000 Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list common-issues@hadoop.apache.org Received: (qmail 52639 invoked by uid 99); 25 Jul 2017 16:16:06 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 25 Jul 2017 16:16:06 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id C78611A0848 for ; Tue, 25 Jul 2017 16:16:05 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -100.002 X-Spam-Level: X-Spam-Status: No, score=-100.002 tagged_above=-999 required=6.31 tests=[RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=disabled Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id VhiT9PKnymV6 for ; Tue, 25 Jul 2017 16:16:05 +0000 (UTC) Received: from mailrelay1-us-west.apache.org (mailrelay1-us-west.apache.org [209.188.14.139]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTP id 94A6061122 for ; Tue, 25 Jul 2017 16:16:03 +0000 (UTC) Received: from jira-lw-us.apache.org (unknown [207.244.88.139]) by mailrelay1-us-west.apache.org (ASF Mail Server at mailrelay1-us-west.apache.org) with ESMTP id 31A5FE0DD9 for ; Tue, 25 Jul 2017 16:16:03 +0000 (UTC) Received: from jira-lw-us.apache.org (localhost [127.0.0.1]) by jira-lw-us.apache.org (ASF Mail Server at jira-lw-us.apache.org) with ESMTP id 830C423F1D for ; Tue, 25 Jul 2017 16:16:01 +0000 (UTC) Date: Tue, 25 Jul 2017 16:16:01 +0000 (UTC) From: "Kihwal Lee (JIRA)" To: common-issues@hadoop.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (HADOOP-14578) Bind IPC connections to kerberos UPN host for proxy users MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Tue, 25 Jul 2017 16:16:08 -0000 [ https://issues.apache.org/jira/browse/HADOOP-14578?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kihwal Lee updated HADOOP-14578: -------------------------------- Attachment: HADOOP-14578.patch reattaching the same trunk patch > Bind IPC connections to kerberos UPN host for proxy users > --------------------------------------------------------- > > Key: HADOOP-14578 > URL: https://issues.apache.org/jira/browse/HADOOP-14578 > Project: Hadoop Common > Issue Type: Bug > Components: ipc > Affects Versions: 2.0.0-alpha > Reporter: Daryn Sharp > Assignee: Daryn Sharp > Attachments: HADOOP-14578.branch-2.8.patch, HADOOP-14578.patch, HADOOP-14578.patch > > > The IPC client will only bind to a kerberos UPN host for the effective user. For proxy users, it does not bind to the authenticating real user's UPN host. This is inconsistent and prevents strict host checking of connection. -- This message was sent by Atlassian JIRA (v6.4.14#64029) --------------------------------------------------------------------- To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org For additional commands, e-mail: common-issues-help@hadoop.apache.org