[ 
https://issues.apache.org/jira/browse/HDFS-3113?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13417630#comment-13417630
 ] 

Daryn Sharp commented on HDFS-3113:
-----------------------------------

Just to make sure I understand: WebHDFS client -> HttpFS -> SomeFS.  Is HttpFS 
acting like a pure proxy and relaying the real token for SomeFS back to the 
client?  If so, what's the purpose of the secret manager in httpfs?

Regarding token decoding, this:
{code}
ByteArrayInputStream buf = new ByteArrayInputStream(token.getIdentifier());
DataInputStream dis = new DataInputStream(buf);
DelegationTokenIdentifier id = new DelegationTokenIdentifier();
id.readFields(dis);
dis.close();{code}
can be replaced with {{DelegationTokenIdentifier id = token.decodeIdentifier()}}

BTW, have you tested this with oozie to ensure proxy tokens work correctly?
                
> httpfs does not support delegation tokens
> -----------------------------------------
>
>                 Key: HDFS-3113
>                 URL: https://issues.apache.org/jira/browse/HDFS-3113
>             Project: Hadoop HDFS
>          Issue Type: New Feature
>    Affects Versions: 0.23.3
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 0.24.0, 0.23.3
>
>         Attachments: HDFS-3113.patch, HDFS-3113.patch, HDFS-3113.patch, 
> HDFS-3113.patch
>
>
> httpfs does not support calls to get/renew tokens nor delegation token 
> authentication.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to