[
https://issues.apache.org/jira/browse/HADOOP-19359?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18028862#comment-18028862
]
ASF GitHub Bot commented on HADOOP-19359:
-----------------------------------------
szetszwo commented on code in PR #7983:
URL: https://github.com/apache/hadoop/pull/7983#discussion_r2417678062
##########
hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/Server.java:
##########
@@ -2673,7 +2673,7 @@ private RpcSaslProto buildSaslNegotiateResponse()
// accelerate token negotiation by sending initial challenge
// in the negotiation response
if (enabledAuthMethods.contains(AuthMethod.TOKEN)
- &&
SaslMechanismFactory.isDefaultMechanism(AuthMethod.TOKEN.getMechanismName())) {
+ &&
SaslMechanismFactory.isDigestMechanism(AuthMethod.TOKEN.getMechanismName())) {
Review Comment:
DIGEST-MD5 uses MD5 and some other old algorithms. We are working with a
new DIGEST based mechanism for replacing the old algorithms.
##########
hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/SaslMechanismFactory.java:
##########
@@ -65,5 +65,13 @@ public static boolean isDefaultMechanism(String
saslMechanism) {
return HADOOP_SECURITY_SASL_MECHANISM_DEFAULT.equals(saslMechanism);
}
+ public static boolean isDigestMechanism(String saslMechanism) {
+ return saslMechanism.startsWith("DIGEST-");
Review Comment:
In some cases, conf objects are unavailable.
> Accelerate token negotiation for other similar mechanisms.
> ----------------------------------------------------------
>
> Key: HADOOP-19359
> URL: https://issues.apache.org/jira/browse/HADOOP-19359
> Project: Hadoop Common
> Issue Type: Improvement
> Components: ipc, security
> Reporter: Tsz-wo Sze
> Assignee: Tsz-wo Sze
> Priority: Major
> Labels: pull-request-available
>
> HADOOP-19227 changed ipc.Server to accelerate token negotiation only for the
> default mechanism.
> In this JIRA, we change to support other similar mechanisms.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
