[
https://issues.apache.org/jira/browse/OOZIE-1646?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13851170#comment-13851170
]
Robert Kanter commented on OOZIE-1646:
--------------------------------------
{quote}
Usually people write a implementation of TokenSelector (For eg:
hcat/hive,hbase,hftp, webhdfs) and the alias is not used.
{quote}
This is good; then likely making that change won't break anything. But we'd
still have to double check just to be sure.
I believe that this is what we'd have to check:
- MR: MR token
- HDFS: HDFS token
- Hive: Hive token, HBase token
- Pig: Pig token, HCat token
- Sqoop: Sqoop token
- HBase: HBase token
- HCat: HCat token
I can start checking with those teams to see how they get the delegation token.
Is there anything else we have to check?
> HBase Table Copy between two HBase servers doesn't work with Kerberos
> ---------------------------------------------------------------------
>
> Key: OOZIE-1646
> URL: https://issues.apache.org/jira/browse/OOZIE-1646
> Project: Oozie
> Issue Type: Improvement
> Components: action, security
> Affects Versions: 3.3.2, 4.0.0
> Reporter: Robert Kanter
> Assignee: Robert Kanter
> Attachments: OOZIE-1646.patch
>
>
> If you try to use the Java action to do an HBase copy between two HBase
> servers with Kerberos, it will fail. We need to update the
> {{HbaseCredentials}} to support acquiring *two* HBase delegation tokens.
> We should also update the documentation to mention that multiple credentials
> can be used by the same action (e.g. {{cred="foo,bar"}}).
--
This message was sent by Atlassian JIRA
(v6.1.4#6159)
