hadoop-mapreduce-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Devaraj Das (JIRA)" <j...@apache.org>
Subject [jira] Updated: (MAPREDUCE-1550) UGI.doAs should not be used for getting the history file of jobs
Date Wed, 03 Mar 2010 07:05:27 GMT

     [ https://issues.apache.org/jira/browse/MAPREDUCE-1550?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Devaraj Das updated MAPREDUCE-1550:
-----------------------------------

    Attachment: 1550-1.patch

This fixes the problem. The problem is that, in a secure env, the FileSystem.get() would require
user's credentials to talk to the NameNode if the get() was done within a UGI.doAs. Removing
the doAs would mean that the JobTracker's credentials would be used which is the right thing
to do since the JobHistory files are owned by the JobTracker anyway..

> UGI.doAs should not be used for getting the history file of jobs
> ----------------------------------------------------------------
>
>                 Key: MAPREDUCE-1550
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1550
>             Project: Hadoop Map/Reduce
>          Issue Type: Bug
>          Components: jobtracker
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>             Fix For: 0.22.0
>
>         Attachments: 1550-1.patch
>
>
> When the jobtracker tries to open a job history file it does a doAs to get the filesystem
for the user (that had submitted the job). This should not be done since the job history files
are owned by the jobtracker.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message