[ https://issues.apache.org/jira/browse/HADOOP-11567?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14612521#comment-14612521 ]
Arpit Agarwal commented on HADOOP-11567: ---------------------------------------- Thanks for this improvement [~benoyantony]. I've posted a few comments to Github https://github.com/arp7/hadoop/commit/160cf1ec45ad666c66ca33e6a1a5bf0774a6f76e?diff=unified I'll copy paste my comments to this Jira shortly. > Refresh HTTP Authentication secret without restarting the server > ---------------------------------------------------------------- > > Key: HADOOP-11567 > URL: https://issues.apache.org/jira/browse/HADOOP-11567 > Project: Hadoop Common > Issue Type: Improvement > Affects Versions: 2.6.0 > Reporter: Benoy Antony > Assignee: Benoy Antony > Labels: BB2015-05-TBR > Attachments: HADOOP-11567-001.patch, HADOOP-11567-002.patch > > > The _AuthenticationFilter_ uses the secret read from a file specified via > hadoop.http.authentication.signature.secret.file to sign the cookie > containing user authentication information. > The secret is read only during initialization and hence needs a restart to > update the secret. > ZKSignerSecretProvider can be used to rotate the secrets without restarting > the servers, but it needs a zookeeper setup. > The jira is to refresh secret by updating the file. -- This message was sent by Atlassian JIRA (v6.3.4#6332)