Return-Path: X-Original-To: apmail-storm-dev-archive@minotaur.apache.org Delivered-To: apmail-storm-dev-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 7432A11F9C for ; Fri, 18 Jul 2014 20:14:52 +0000 (UTC) Received: (qmail 43776 invoked by uid 500); 18 Jul 2014 20:14:52 -0000 Delivered-To: apmail-storm-dev-archive@storm.apache.org Received: (qmail 43724 invoked by uid 500); 18 Jul 2014 20:14:52 -0000 Mailing-List: contact dev-help@storm.incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@storm.incubator.apache.org Delivered-To: mailing list dev@storm.incubator.apache.org Received: (qmail 43710 invoked by uid 99); 18 Jul 2014 20:14:51 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 18 Jul 2014 20:14:51 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=5.0 tests=ALL_TRUSTED,RP_MATCHES_RCVD X-Spam-Check-By: apache.org Received: from [140.211.11.3] (HELO mail.apache.org) (140.211.11.3) by apache.org (qpsmtpd/0.29) with SMTP; Fri, 18 Jul 2014 20:14:50 +0000 Received: (qmail 42056 invoked by uid 99); 18 Jul 2014 20:14:29 -0000 Received: from tyr.zones.apache.org (HELO tyr.zones.apache.org) (140.211.11.114) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 18 Jul 2014 20:14:29 +0000 Received: by tyr.zones.apache.org (Postfix, from userid 65534) id A2DEA94F20D; Fri, 18 Jul 2014 20:14:29 +0000 (UTC) From: Parth-Brahmbhatt To: dev@storm.incubator.apache.org Reply-To: dev@storm.incubator.apache.org References: In-Reply-To: Subject: [GitHub] incubator-storm pull request: STORM-346: added AutoHDFS class that... Content-Type: text/plain Message-Id: <20140718201429.A2DEA94F20D@tyr.zones.apache.org> Date: Fri, 18 Jul 2014 20:14:29 +0000 (UTC) X-Virus-Checked: Checked by ClamAV on apache.org Github user Parth-Brahmbhatt commented on the pull request: https://github.com/apache/incubator-storm/pull/190#issuecomment-49474731 Here is what I have so far: User can specify AutoHDFS.java as "nimbus.credential.renewers.classes" and AutoHDFS will only implement ICredentialsRenewer. In the prepare phase of AutoHDFS.java, which should be called on nimbus startup, we can get the HDFS credentials. However, I don't think the topology submitter user will be available at that time so we will not be able to get the token on behalf of the user but only as nimbus which I feel is unacceptable. In order to actually get the credentials as topology submitter user, we either need a new Interface that will run on nimbus when a topology is submitted as part of submitTopologyWithOpts implementation or we can add getCredentialForUser(Map conf) method to ICredentialsRenewer interface and call that as part of submitTopologyWithOpts. I personally prefer not to pollute the ICredentialsRenewer interface. Let me know if you have better alternatives or prefer one over another. I have one last question. The ICredentialsRenewer implementations seems to be loaded by reading "nimbus.credential.renewers.classes" config at startup by nimbus. This means the users who have a running nimbus and wants to use AutoHDFS or any other implementation of ICredentialsRenewer will have to change the config and restart the nimbus. Is that acceptable? --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is enabled but not working, please contact infrastructure at infrastructure@apache.org or file a JIRA ticket with INFRA. ---