[
https://issues.apache.org/jira/browse/HADOOP-19212?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18016438#comment-18016438
]
ASF GitHub Bot commented on HADOOP-19212:
-----------------------------------------
stoty commented on PR #7897:
URL: https://github.com/apache/hadoop/pull/7897#issuecomment-3226918448
> > Which parts does Spark even test ? HDFS ? MR/Yarn ? Do Spark tests use
secure mode / kerberos ? Do they use doAs/proxyUser ?
>
> Spark UT does not cover HDFS/MR tests, it has YARN integration tests by
leveraging `MiniYARNCluster`, the Kerberos test coverage is low, with almost
all tests run under SIMPLE mode.
Thanks
>
> > I am wary of shipping a 3.4.3 that looks like it works with Java 18+ at
first glance
>
> This is better than nothing, we can continue to fix issues discovered by
downstream projects and release new patched versions.
Or we can backport all JDK 18+ patches, and have better confidence that it
will work on the first try.
Really there are only two major patches, one is this one, and the other one
is the thread patch.
The rest are quite small/simple or only affect tests.
> [JDK23] org.apache.hadoop.security.UserGroupInformation use of Subject needs
> to move to replacement APIs
> --------------------------------------------------------------------------------------------------------
>
> Key: HADOOP-19212
> URL: https://issues.apache.org/jira/browse/HADOOP-19212
> Project: Hadoop Common
> Issue Type: Sub-task
> Components: security
> Affects Versions: 3.5.0
> Reporter: Alan Bateman
> Priority: Major
> Labels: pull-request-available
>
> `javax.security.auth.Subject.getSubject` and `Subject.doAs` were deprecated
> for removal in JDK 17. The replacement APIs are `Subject.current` and
> `callAs`. See [JEP 411]([https://openjdk.org/jeps/411]) for background.
> The `Subject.getSubject` API has been "degraded" in JDK 23 to throw
> `UnsupportedOperationException` if not running with the option to allow a
> SecurityManager. In a future JDK release, the `Subject.getSubject` API will
> be degraded further to throw`UnsupportedOperationException` unconditionally.
> [renaissance/issues/439]([https://github.com/renaissance-benchmarks/renaissance/issues/439])
> is a failure with a Spark benchmark due to the code in
> `org.apache.hadoop.security.UserGroupInformation` using the deprecated
> `Subject.getSubject` method. The maintainers of this code need to migrate
> this code to the replacement APIs to ensure that this code will continue to
> work once the security manager feature is removed.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org
