hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Haohui Mai (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-6667) In HDFS HA mode, Distcp/SLive with webhdfs on secure cluster fails with Client cannot authenticate via:[TOKEN, KERBEROS] error
Date Tue, 15 Jul 2014 17:17:05 GMT

    [ https://issues.apache.org/jira/browse/HDFS-6667?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14062340#comment-14062340
] 

Haohui Mai commented on HDFS-6667:
----------------------------------

Looks good to me. +1. I think that this patch implements the approach proposed by Daryn.

[~daryn], do you have any comments?

> In HDFS HA mode, Distcp/SLive with webhdfs on secure cluster fails with Client cannot
authenticate via:[TOKEN, KERBEROS] error
> ------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: HDFS-6667
>                 URL: https://issues.apache.org/jira/browse/HDFS-6667
>             Project: Hadoop HDFS
>          Issue Type: Bug
>          Components: security
>            Reporter: Jian He
>            Assignee: Jing Zhao
>         Attachments: HDFS-6667.000.patch
>
>
> Opening on [~arpitgupta]'s behalf.
> We observed that, in HDFS HA mode, running Distcp/SLive with webhdfs will fail on YARN.
 In non-HA mode, it'll pass. 
> The reason is in HA mode, only webhdfs delegation token is generated for the job, but
YARN also requires the regular hdfs token to do localization, log-aggregation etc.
> In non-HA mode, both tokens are generated for the job.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message