[ https://issues.apache.org/jira/browse/HDFS-12284?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16665766#comment-16665766 ]
CR Hota commented on HDFS-12284: -------------------------------- Thanks a lot [~elgoiri] [~lukmajercak] for the extensive testing you folks did. The environment at my end is much more controlled hence hard to find these issues. We can create another ticket for adding hdfs-rbf-default.xml in HdfsConfiguration, but wondering how it will work for NameNode? Because in a namenode scenario, hdfs-rbf-default.xml may not be in the classpath. {code:java} public class HdfsConfiguration extends Configuration { static { addDeprecatedKeys(); // adds the default resources Configuration.addDefaultResource("hdfs-default.xml"); Configuration.addDefaultResource("hdfs-site.xml"); } {code} [~daryn] Thanks for reviewing the initial patch. Haven't looked at the connection manager but you may have performance issues. IPC connections are per-instance based on ugi. You probably want to cache user -> ugi to avoid multiple connections and only construct a ugi if necessary. Dint grasp your point. ConnectionManager does maintain a pool of connections corresponding to a ugi+namenode combination. New code of kerberos doesn't violate that as ugi's will change per user level since router always proxies for original client user. I plan to enhance the connection pooling part by introducing synchronous connection creation using semaphore semantics instead of the current asynchronous connection creation. > RBF: Support for Kerberos authentication > ---------------------------------------- > > Key: HDFS-12284 > URL: https://issues.apache.org/jira/browse/HDFS-12284 > Project: Hadoop HDFS > Issue Type: Sub-task > Components: security > Reporter: Zhe Zhang > Assignee: Sherwood Zheng > Priority: Major > Attachments: HDFS-12284-HDFS-13532.004.patch, > HDFS-12284-HDFS-13532.005.patch, HDFS-12284-HDFS-13532.006.patch, > HDFS-12284-HDFS-13532.007.patch, HDFS-12284-HDFS-13532.008.patch, > HDFS-12284-HDFS-13532.009.patch, HDFS-12284-HDFS-13532.010.patch, > HDFS-12284-HDFS-13532.011.patch, HDFS-12284-HDFS-13532.012.patch, > HDFS-12284.000.patch, HDFS-12284.001.patch, HDFS-12284.002.patch, > HDFS-12284.003.patch > > > HDFS Router should support Kerberos authentication and issuing / managing > HDFS delegation tokens. -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org