hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Xiao Chen (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HDFS-9804) Allow long-running Balancer in Kerberized Environments
Date Wed, 24 Feb 2016 23:30:18 GMT

     [ https://issues.apache.org/jira/browse/HDFS-9804?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel

Xiao Chen updated HDFS-9804:
    Attachment: HDFS-9804.03.patch

Thanks [~zhz] for the review! Patch 3 is attached.
bq. It's better to add some error handling in checkKerberosAndInit: what if DFS_BALANCER_KERBEROS_PRINCIPAL_KEY
or the keytab file key is not set.
That's handled in {{SecurityUtil#login}} :)
It'll throw IOE with details if keytab is given incorrectly, and will use system username
if principal is not provided
bq. Looks like getAddress can be folded into the checkKerberosAndInit method?
bq. Maybe checkKeytabAndInit is a better name?
bq. assertTrue(ugi.isLoginKeytabBased()) should be UserGroupInformation.isLoginKeytabBased()
since the method is static
bq. This can be a follow-on: ideally we can verify the behavior when used with the hdfs --daemon
Makes sense, I assume --daemon would be the same for all commands though.
bq. Another follow-on idea is to verify the relogin after TGT "max renew time" expires. It
could be hard to control KDC TGT config though.
I manually verified this, but I guess I could borrow your patch from HADOOP-12559 to do it

> Allow long-running Balancer in Kerberized Environments
> ------------------------------------------------------
>                 Key: HDFS-9804
>                 URL: https://issues.apache.org/jira/browse/HDFS-9804
>             Project: Hadoop HDFS
>          Issue Type: New Feature
>            Reporter: Xiao Chen
>            Assignee: Xiao Chen
>              Labels: supportability
>         Attachments: HDFS-9804.01.patch, HDFS-9804.02.patch, HDFS-9804.03.patch
> From the discussion of HDFS-9698, it might be nice to allow the balancer to run as a
daemon and login from a keytab.

This message was sent by Atlassian JIRA

View raw message