hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Xiao Chen (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HDFS-12300) Audit-log delegation token related operations
Date Mon, 04 Sep 2017 03:28:00 GMT

     [ https://issues.apache.org/jira/browse/HDFS-12300?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Xiao Chen updated HDFS-12300:
-----------------------------
    Release Note: 
<!-- markdown -->

NameNode now audit-logs `getDelegationToken`, `renewDelegationToken`, `cancelDelegationToken`.

  was:
<!-- markdown -->

NameNode now audit-logs {{getDelegationToken}} {{renewDelegationToken}} {{cancelDelegationToken}}.


> Audit-log delegation token related operations
> ---------------------------------------------
>
>                 Key: HDFS-12300
>                 URL: https://issues.apache.org/jira/browse/HDFS-12300
>             Project: Hadoop HDFS
>          Issue Type: Improvement
>          Components: namenode
>    Affects Versions: 0.22.0
>            Reporter: Xiao Chen
>            Assignee: Xiao Chen
>             Fix For: 3.0.0-beta1
>
>         Attachments: HDFS-12300.01.patch, HDFS-12300.02.patch
>
>
> When inspecting the code, I found that the following methods in FSNamesystem are not
audit logged:
> - getDelegationToken
> - renewDelegationToken
> - cancelDelegationToken
> The audit log itself does have a logTokenTrackingId field to additionally log some details
when a token is used for authentication.
> After emailing the community, we should add that.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org


Mime
View raw message