Return-Path: X-Original-To: apmail-hadoop-hdfs-issues-archive@minotaur.apache.org Delivered-To: apmail-hadoop-hdfs-issues-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 8803FDA28 for ; Wed, 3 Oct 2012 19:20:08 +0000 (UTC) Received: (qmail 20656 invoked by uid 500); 3 Oct 2012 19:20:08 -0000 Delivered-To: apmail-hadoop-hdfs-issues-archive@hadoop.apache.org Received: (qmail 20612 invoked by uid 500); 3 Oct 2012 19:20:08 -0000 Mailing-List: contact hdfs-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: hdfs-issues@hadoop.apache.org Delivered-To: mailing list hdfs-issues@hadoop.apache.org Received: (qmail 20603 invoked by uid 99); 3 Oct 2012 19:20:08 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 03 Oct 2012 19:20:08 +0000 Date: Thu, 4 Oct 2012 06:20:08 +1100 (NCT) From: "Thomas Graves (JIRA)" To: hdfs-issues@hadoop.apache.org Message-ID: <165152134.160405.1349292008257.JavaMail.jiratomcat@arcas> In-Reply-To: <727947775.52378.1347053047603.JavaMail.jiratomcat@arcas> Subject: [jira] [Updated] (HDFS-3905) Secure cluster cannot use hftp to an insecure cluster MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HDFS-3905?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Thomas Graves updated HDFS-3905: -------------------------------- Resolution: Fixed Fix Version/s: 0.23.5 Status: Resolved (was: Patch Available) fix only applies to 0.23 branch. > Secure cluster cannot use hftp to an insecure cluster > ----------------------------------------------------- > > Key: HDFS-3905 > URL: https://issues.apache.org/jira/browse/HDFS-3905 > Project: Hadoop HDFS > Issue Type: Bug > Components: hdfs client, security > Affects Versions: 0.23.3 > Reporter: Daryn Sharp > Assignee: Daryn Sharp > Priority: Critical > Fix For: 0.23.5 > > Attachments: HDFS-3905.patch > > > HDFS-3873 fixed the case where all exceptions acquiring tokens for hftp were ignored. Jobs would be submitted sans tokens, and then the tasks would eventually all fail trying to get the missing token. HDFS-3873 made jobs fail to submit if the remote cluster is secure. > Unfortunately it regressed the ability for a secure cluster to access an insecure cluster over hftp. The issue is unique to 23 due to KSSL. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira