hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Kihwal Lee (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-3553) Hftp proxy tokens are broken
Date Thu, 21 Jun 2012 23:21:43 GMT

    [ https://issues.apache.org/jira/browse/HDFS-3553?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13398991#comment-13398991
] 

Kihwal Lee commented on HDFS-3553:
----------------------------------

WebHDFS is a bit different from Hftp in that users can directly interact with it using tools
such as curl. The HTTP user in the request is naturally the actual user who is running the
tool and proxy request will be something special. So, the current way feels more natural than
what's proposed in #1 when it comes to direct user interactions.  

In Hftp, since HTTP requests are made only programmatically, wrapping a request in doAs seems
consistent with the rest of the system. The fact that HTTP user = currentUser doesn't affect
the usability, as it's all hidden from users.

#1 can be added to v2 of WebHDFS, but we will have to maintain compatibility for a version
or two, so JspHelper will become perhaps even more messier than #2. 

Since this inconsistency fortunately does not cause any confusion to users, we should probably
go with #2. We will get the better usability (maybe) and the compatibility at the price of
some inconsistency/complexity in the code. How about doing #2 and leaving a block of well-written
comment in the code? :)

                
> Hftp proxy tokens are broken
> ----------------------------
>
>                 Key: HDFS-3553
>                 URL: https://issues.apache.org/jira/browse/HDFS-3553
>             Project: Hadoop HDFS
>          Issue Type: Bug
>    Affects Versions: 1.0.2, 2.0.0-alpha, 3.0.0
>            Reporter: Daryn Sharp
>            Assignee: Daryn Sharp
>            Priority: Blocker
>         Attachments: HDFS-3553.branch-1.0.patch
>
>
> Proxy tokens are broken for hftp.  The impact is systems using proxy tokens, such as
oozie jobs, cannot use hftp.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message