Return-Path: X-Original-To: apmail-hadoop-hdfs-issues-archive@minotaur.apache.org Delivered-To: apmail-hadoop-hdfs-issues-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 09976DB67 for ; Wed, 6 Mar 2013 22:10:14 +0000 (UTC) Received: (qmail 23763 invoked by uid 500); 6 Mar 2013 22:10:13 -0000 Delivered-To: apmail-hadoop-hdfs-issues-archive@hadoop.apache.org Received: (qmail 23723 invoked by uid 500); 6 Mar 2013 22:10:13 -0000 Mailing-List: contact hdfs-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: hdfs-issues@hadoop.apache.org Delivered-To: mailing list hdfs-issues@hadoop.apache.org Received: (qmail 23587 invoked by uid 99); 6 Mar 2013 22:10:13 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 06 Mar 2013 22:10:13 +0000 Date: Wed, 6 Mar 2013 22:10:13 +0000 (UTC) From: "Hadoop QA (JIRA)" To: hdfs-issues@hadoop.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (HDFS-4560) Webhdfs cannot use tokens obtained by another user MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HDFS-4560?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13595177#comment-13595177 ] Hadoop QA commented on HDFS-4560: --------------------------------- {color:red}-1 overall{color}. Here are the results of testing the latest attachment http://issues.apache.org/jira/secure/attachment/12572404/HDFS-4560.patch against trunk revision . {color:red}-1 patch{color}. The patch command could not apply the patch. Console output: https://builds.apache.org/job/PreCommit-HDFS-Build/4045//console This message is automatically generated. > Webhdfs cannot use tokens obtained by another user > -------------------------------------------------- > > Key: HDFS-4560 > URL: https://issues.apache.org/jira/browse/HDFS-4560 > Project: Hadoop HDFS > Issue Type: Bug > Components: webhdfs > Affects Versions: 3.0.0, 0.23.7, 2.0.4-beta > Reporter: Daryn Sharp > Assignee: Daryn Sharp > Attachments: HDFS-4560.patch > > > Webhdfs passes {{UserParam}} even when a token is being used. The NN will construct the UGI from the token and error if the {{UserParam}} does not match the token's. This causes problems when a token for user A is used with user B's context. This is in contrast to hdfs which will honor the token's ugi no matter the client's current context. The passing of a token or user params should be mutually exclusive. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira