[ https://issues.apache.org/jira/browse/HDFS-16945?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17698383#comment-17698383 ]
ASF GitHub Bot commented on HDFS-16945: --------------------------------------- Neilxzn opened a new pull request, #5468: URL: https://github.com/apache/hadoop/pull/5468 <!-- Thanks for sending a pull request! 1. If this is your first time, please read our contributor guidelines: https://cwiki.apache.org/confluence/display/HADOOP/How+To+Contribute 2. Make sure your PR title starts with JIRA issue id, e.g., 'HADOOP-17799. Your PR title ...'. --> ### Description of PR [HDFS-16945](https://issues.apache.org/jira/browse/HDFS-16945) we should add audit log for router security manager for token APIs. For examples, ``` 2023-03-02 20:53:02,712 INFO org.apache.hadoop.hdfs.server.federation.router.security.RouterSecurityManager.audit: allowed=true ugi=hadoop ip=localhost/127.0.0.1 cmd=getDelegationToken toeknId=HDFS_DELEGATION_TOKEN token 18359 for hadoop with renewer hadoop proto=webhdfs ``` ### How was this patch tested? add testRouterSecurityAuditLog ### For code changes: add RouterSecurityAuditLogger > RBF: add RouterSecurityAuditLogger for router security manager > -------------------------------------------------------------- > > Key: HDFS-16945 > URL: https://issues.apache.org/jira/browse/HDFS-16945 > Project: Hadoop HDFS > Issue Type: New Feature > Components: rbf > Affects Versions: 3.4.0 > Reporter: Max Xie > Assignee: Max Xie > Priority: Minor > > we should add audit log for router security manager for token APIs. For > examples, > ``` > > {{2023-03-02 20:53:02,712 INFO > org.apache.hadoop.hdfs.server.federation.router.security.RouterSecurityManager.audit: > allowed=true ugi=hadoop ip=localhost/127.0.0.1 cmd=getDelegationToken > toeknId=HDFS_DELEGATION_TOKEN token 18359 for hadoop with renewer > hadoop proto=webhdfs}} > ``` -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org