Return-Path: X-Original-To: apmail-hadoop-hdfs-issues-archive@minotaur.apache.org Delivered-To: apmail-hadoop-hdfs-issues-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 90D0698C1 for ; Thu, 12 Apr 2012 15:15:41 +0000 (UTC) Received: (qmail 69903 invoked by uid 500); 12 Apr 2012 15:15:40 -0000 Delivered-To: apmail-hadoop-hdfs-issues-archive@hadoop.apache.org Received: (qmail 69845 invoked by uid 500); 12 Apr 2012 15:15:40 -0000 Mailing-List: contact hdfs-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: hdfs-issues@hadoop.apache.org Delivered-To: mailing list hdfs-issues@hadoop.apache.org Received: (qmail 69582 invoked by uid 99); 12 Apr 2012 15:15:40 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 12 Apr 2012 15:15:40 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=5.0 tests=ALL_TRUSTED,T_RP_MATCHES_RCVD X-Spam-Check-By: apache.org Received: from [140.211.11.116] (HELO hel.zones.apache.org) (140.211.11.116) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 12 Apr 2012 15:15:38 +0000 Received: from hel.zones.apache.org (hel.zones.apache.org [140.211.11.116]) by hel.zones.apache.org (Postfix) with ESMTP id 129223673D1 for ; Thu, 12 Apr 2012 15:15:17 +0000 (UTC) Date: Thu, 12 Apr 2012 15:15:17 +0000 (UTC) From: "Daryn Sharp (Commented) (JIRA)" To: hdfs-issues@hadoop.apache.org Message-ID: <968490107.17477.1334243717077.JavaMail.tomcat@hel.zones.apache.org> In-Reply-To: <2033954228.14282.1334176276822.JavaMail.tomcat@hel.zones.apache.org> Subject: [jira] [Commented] (HDFS-3255) HA DFS returns wrong token service MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HDFS-3255?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13252480#comment-13252480 ] Daryn Sharp commented on HDFS-3255: ----------------------------------- I found the problem while reviewing the code for host-based tokens and then confirmed it was a problem via the unit tests. Proper handling of the service is very important. The service is used to determine whether a token is already acquired. I can see if I can use Jitendra's feature to enable security for a unit test if you'd like. > HA DFS returns wrong token service > ---------------------------------- > > Key: HDFS-3255 > URL: https://issues.apache.org/jira/browse/HDFS-3255 > Project: Hadoop HDFS > Issue Type: Bug > Components: ha, hdfs client > Affects Versions: 2.0.0 > Reporter: Daryn Sharp > Assignee: Daryn Sharp > Priority: Critical > Attachments: HDFS-3255.patch > > > {{fs.getCanonicalService()}} must be equal to {{fs.getDelegationToken(renewer).getService()}}. When HA is enabled, the DFS token's service is a logical uri, but {{dfs.getCanonicalService()}} is only returning the hostname of the logical uri. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira