hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Daryn Sharp (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-3553) Hftp proxy tokens are broken
Date Tue, 03 Jul 2012 13:29:20 GMT

    [ https://issues.apache.org/jira/browse/HDFS-3553?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13405915#comment-13405915

Daryn Sharp commented on HDFS-3553:

Also of note, the patch makes the example code for Secure_Impersonation work under hftp. 
I'm working on patches for the newer branches since the code has changed under spnego auth.
 The problem appears to be there, but I haven't set up a spnego cluster to verify.  In the
meantime, the patch really needs to go into 1.x.

Currently w/o the patch, oozie on 1.x cannot use hftp to any 1.x/2.x+ cluster.  Hftp on 1.x+
works with 20x only if the proxy token is acquired over hdfs.  This defeats the primary purpose
of using hftp (immunity from rpc version mismatches).  Webhdfs may be similarly affected although
that should be fixed under another jira if proven to be true.
> Hftp proxy tokens are broken
> ----------------------------
>                 Key: HDFS-3553
>                 URL: https://issues.apache.org/jira/browse/HDFS-3553
>             Project: Hadoop HDFS
>          Issue Type: Bug
>    Affects Versions: 1.0.2, 2.0.0-alpha, 3.0.0
>            Reporter: Daryn Sharp
>            Assignee: Daryn Sharp
>            Priority: Blocker
>         Attachments: HDFS-3553-1.branch-1.0.patch, HDFS-3553.branch-1.0.patch
> Proxy tokens are broken for hftp.  The impact is systems using proxy tokens, such as
oozie jobs, cannot use hftp.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira


View raw message