hadoop-mapreduce-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Devaraj Das (JIRA)" <j...@apache.org>
Subject [jira] Updated: (MAPREDUCE-1550) UGI.doAs should not be used for getting the history file of jobs
Date Wed, 03 Mar 2010 07:05:27 GMT

     [ https://issues.apache.org/jira/browse/MAPREDUCE-1550?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel

Devaraj Das updated MAPREDUCE-1550:

    Attachment: 1550-1.patch

This fixes the problem. The problem is that, in a secure env, the FileSystem.get() would require
user's credentials to talk to the NameNode if the get() was done within a UGI.doAs. Removing
the doAs would mean that the JobTracker's credentials would be used which is the right thing
to do since the JobHistory files are owned by the JobTracker anyway..

> UGI.doAs should not be used for getting the history file of jobs
> ----------------------------------------------------------------
>                 Key: MAPREDUCE-1550
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1550
>             Project: Hadoop Map/Reduce
>          Issue Type: Bug
>          Components: jobtracker
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>             Fix For: 0.22.0
>         Attachments: 1550-1.patch
> When the jobtracker tries to open a job history file it does a doAs to get the filesystem
for the user (that had submitted the job). This should not be done since the job history files
are owned by the jobtracker.

This message is automatically generated by JIRA.
You can reply to this email to add a comment to the issue online.

View raw message