[ https://issues.apache.org/jira/browse/HADOOP-14351?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Mingliang Liu updated HADOOP-14351: ----------------------------------- Status: Patch Available (was: Open) I'll have a look at the patch. Thanks for working on this. > Azure: RemoteWasbAuthorizerImpl and RemoteSASKeyGeneratorImpl use Kerberos > interactive user cache > ------------------------------------------------------------------------------------------------- > > Key: HADOOP-14351 > URL: https://issues.apache.org/jira/browse/HADOOP-14351 > Project: Hadoop Common > Issue Type: Bug > Components: fs/azure > Affects Versions: 2.9.0 > Reporter: Santhosh G Nayak > Assignee: Santhosh G Nayak > Attachments: HADOOP-14351.1.patch > > > Currently, {{RemoteWasbAuthorizerImpl.getRelativeBlobSASUri()}}, > {{RemoteWasbAuthorizerImpl.getContainerSASUri()}} and > {{RemoteSASKeyGeneratorImpl.authorize()}} use Kerberos interactive user's > ticket cache if the kerberos credential is not available for > {{UserGroupInformation.getCurrentUser()}} or > {{UserGroupInformation.getRealUser()}}. > It results in usage of interactive user's ticket for impersonation, whenever > services try to do File System operations as another user, which is incorrect. -- This message was sent by Atlassian JIRA (v6.3.15#6346) --------------------------------------------------------------------- To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-issues-h...@hadoop.apache.org