hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Srikanth Sundarrajan (JIRA)" <j...@apache.org>
Subject [jira] Updated: (HDFS-1009) Allow HDFSProxy to impersonate the real user while processing user request
Date Tue, 06 Apr 2010 18:45:34 GMT

     [ https://issues.apache.org/jira/browse/HDFS-1009?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Srikanth Sundarrajan updated HDFS-1009:
---------------------------------------

    Attachment: HDFS-1009.patch

Output from test-patch

     [exec] -1 overall.  
     [exec] 
     [exec]     +1 @author.  The patch does not contain any @author tags.
     [exec] 
     [exec]     -1 tests included.  The patch doesn't appear to include any new or modified
tests.
     [exec]                         Please justify why no new tests are needed for this patch.
     [exec]                         Also please list what manual steps were performed to verify
this patch.
     [exec] 
     [exec]     +1 javadoc.  The javadoc tool did not generate any warning messages.
     [exec] 
     [exec]     +1 javac.  The applied patch does not increase the total number of javac compiler
warnings.
     [exec] 
     [exec]     +1 findbugs.  The patch does not introduce any new Findbugs warnings.
     [exec] 
     [exec]     +1 release audit.  The applied patch does not increase the total number of
release audit warnings.


test-contrib:

test:
   [cactus] Tomcat 5.x is stopped

BUILD SUCCESSFUL
Total time: 4 minutes 39 seconds

------------

No new tests added with this patch, as the patch is specific to Keberos and the current unit
test framework doesn't extend itself to test this. However the patch has been tested manually.

A keytab file for the proxy user was created and the principal in keytab file is configured
as proxy user in the Namenode configuration[core-site.xml] (hadoop.proxyuser.proxy.users,
hadoop.proxyuser.proxy.ip-addresses). Ip address configured in Namenode core-site.xml is that
of the server where hdfsproxy is setup to run and the proxy user is same as the user in the
keytab file. With this, doAs requests are successful and the requests are able to retrieve
files only readable by the requesting user or the users' group.

> Allow HDFSProxy to impersonate the real user while processing user request
> --------------------------------------------------------------------------
>
>                 Key: HDFS-1009
>                 URL: https://issues.apache.org/jira/browse/HDFS-1009
>             Project: Hadoop HDFS
>          Issue Type: Improvement
>          Components: contrib/hdfsproxy
>    Affects Versions: 0.22.0
>            Reporter: Srikanth Sundarrajan
>            Assignee: Srikanth Sundarrajan
>         Attachments: HDFS-1009.patch
>
>
> HDFSProxy when processing an user request, should perform the operations as the real
user.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message