[ https://issues.apache.org/jira/browse/HADOOP-7215?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13289267#comment-13289267 ]
Hudson commented on HADOOP-7215: -------------------------------- Integrated in Hadoop-Common-22-branch #106 (See [https://builds.apache.org/job/Hadoop-Common-22-branch/106/]) HADOOP-7215. RPC clients must use network interface corresponding to the host in the client's kerberos principal key. Contributed by Suresh Srinivas and Benoy Antony. (Revision 1346241) Result = SUCCESS shv : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1346241 Files : * /hadoop/common/branches/branch-0.22/common/CHANGES.txt * /hadoop/common/branches/branch-0.22/common/src/java/org/apache/hadoop/ipc/Client.java * /hadoop/common/branches/branch-0.22/common/src/java/org/apache/hadoop/net/NetUtils.java * /hadoop/common/branches/branch-0.22/common/src/java/org/apache/hadoop/security/SecurityUtil.java * /hadoop/common/branches/branch-0.22/common/src/test/core/org/apache/hadoop/security/TestSecurityUtil.java > RPC clients must connect over a network interface corresponding to the host > name in the client's kerberos principal key > ----------------------------------------------------------------------------------------------------------------------- > > Key: HADOOP-7215 > URL: https://issues.apache.org/jira/browse/HADOOP-7215 > Project: Hadoop Common > Issue Type: Bug > Components: security > Reporter: Suresh Srinivas > Assignee: Suresh Srinivas > Priority: Blocker > Fix For: 0.20.203.0, 0.21.1, 0.23.0 > > Attachments: HADOOP-7215.1.trunk.patch, HADOOP-7215.2.trunk.patch, > HADOOP-7215.2xx.patch, HADOOP-7215.3.trunk.patch, HADOOP-7215.debug.patch, > HADOOP-7215.debug.patch, hadoop-7215-0.22.patch > > > HDFS-7104 introduced a change where RPC server matches client's hostname with > the hostname specified in the client's Kerberos principal name. RPC client > binds the socket to a random local address, which might not match the > hostname specified in the principal name. This results authorization failure > of the client at the server. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira