[ https://issues.apache.org/jira/browse/HDFS-5842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13886565#comment-13886565 ]
Hudson commented on HDFS-5842: ------------------------------ FAILURE: Integrated in Hadoop-Mapreduce-trunk #1683 (See [https://builds.apache.org/job/Hadoop-Mapreduce-trunk/1683/]) Update CHANGES.txt to move HDFS-5842 to 2.3.0 (wang: http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1562656) * /hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt HDFS-5842. Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster. Contributed by Jing Zhao. (jing9: http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1562603) * /hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt * /hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/tools/DelegationTokenFetcher.java * /hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/web/HftpFileSystem.java > Cannot create hftp filesystem when using a proxy user ugi and a doAs on a > secure cluster > ---------------------------------------------------------------------------------------- > > Key: HDFS-5842 > URL: https://issues.apache.org/jira/browse/HDFS-5842 > Project: Hadoop HDFS > Issue Type: Bug > Components: security > Affects Versions: 2.2.0 > Reporter: Arpit Gupta > Assignee: Jing Zhao > Fix For: 2.3.0 > > Attachments: HADOOP-10215.000.patch, HADOOP-10215.001.patch, > HADOOP-10215.002.patch, HADOOP-10215.002.patch > > > Noticed this while debugging issues in another application. We saw an error > when trying to do a FileSystem.get using an hftp file system on a secure > cluster using a proxy user ugi. > This is a small snippet used > {code} > FileSystem testFS = ugi.doAs(new PrivilegedExceptionAction<FileSystem>() { > @Override > public FileSystem run() throws IOException { > return FileSystem.get(hadoopConf); > } > }); > {code} > The same code worked for hdfs and webhdfs but not for hftp when the ugi used > was UserGroupInformation.createProxyUser -- This message was sent by Atlassian JIRA (v6.1.5#6160)