[
https://issues.apache.org/jira/browse/LENS-1514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16489201#comment-16489201
]
Hudson commented on LENS-1514:
------------------------------
SUCCESS: Integrated in Jenkins build Lens-Commit #1466 (See
[https://builds.apache.org/job/Lens-Commit/1466/])
LENS-1514:Support HDFS delegation token authentication (rajitha.r: rev
0edb80f1a46f10f2470b5eaac4272bf6ee9fe418)
* (edit) contrib/clients/python/lens/client/main.py
* (edit)
lens-client/src/main/java/org/apache/lens/client/LensConnectionParams.java
* (edit)
lens-server-api/src/main/java/org/apache/lens/server/api/LensConfConstants.java
* (edit) contrib/clients/python/lens/client/log.py
* (edit) contrib/clients/python/lens/client/query.py
* (edit) contrib/clients/python/lens/client/session.py
* (edit)
lens-server/src/main/java/org/apache/lens/server/auth/SpnegoAuthenticationFilter.java
LENS-1514:Support HDFS delegation token authentication (rajitha.r: rev
26d8f57a21bf281f1152c3b60a6ac425041e83af)
* (add) lens-api/src/main/java/org/apache/lens/api/auth/AuthHeader.java
* (add)
lens-server/src/main/java/org/apache/lens/server/auth/DelegationTokenAuthenticationFilter.java
* (add)
lens-client/src/main/java/org/apache/lens/client/DelegationTokenClientFilter.java
> Support HDFS delegation token authentication
> --------------------------------------------
>
> Key: LENS-1514
> URL: https://issues.apache.org/jira/browse/LENS-1514
> Project: Apache Lens
> Issue Type: Improvement
> Components: client, server
> Reporter: Barun Kumar
> Assignee: Barun Kumar
> Priority: Major
> Fix For: 2.8
>
> Attachments: LENS-1514_1.patch
>
>
> As part of LENS-1509, we have added Spnego authentication based on Kerberos
> to lens. This will work in client-server mode. But this approach will cease
> to work in a hadoop cluster in which user is using lens client in a mapred
> job(such as oozie java action) since there will not be keytabs in the hadoop
> cluster. The authentication in hadoop work on concept of delegation
> token([https://blog.cloudera.com/blog/2017/12/hadoop-delegation-tokens-explained/).]
> Here we are introducing delegation token auth in lens. We are piggybacking on
> HDFS to do authentication by passing it's token and performing a filesystem
> operation.
>
> We will add proper delegation token implementation as future improvement.
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
