[ 
https://issues.apache.org/jira/browse/HDFS-2246?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13109203#comment-13109203
 ] 

Todd Lipcon commented on HDFS-2246:
-----------------------------------

ah, that makes some sense. Each proxy has a different token so they're cached 
separately at the IPC layer. We can call RPC.stopProxy but then we might run 
into HADOOP-7317.

Would it be possible to use kerberos-authenticated RPC to the DN, and then pass 
the block token as a parameter to the method like was done in one of the 
earlier revs of the patch? It's a little "unorthodox" but gets around the 
connection caching issue. Passing the block token means we can still check 
block access based on HDFS permissions, and run as separate principals.

> Shortcut a local client reads to a Datanodes files directly
> -----------------------------------------------------------
>
>                 Key: HDFS-2246
>                 URL: https://issues.apache.org/jira/browse/HDFS-2246
>             Project: Hadoop HDFS
>          Issue Type: Improvement
>            Reporter: Sanjay Radia
>         Attachments: 0001-HDFS-347.-Local-reads.patch, HDFS-2246.20s.1.patch, 
> HDFS-2246.20s.2.txt, HDFS-2246.20s.3.txt, HDFS-2246.20s.patch, 
> localReadShortcut20-security.2patch
>
>


--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to