[ 
https://issues.apache.org/jira/browse/MAPREDUCE-1532?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12838609#action_12838609
 ] 

Boris Shkolnik commented on MAPREDUCE-1532:
-------------------------------------------

I've reviewed DelegationTokenRenewal related parts.
Changes to DelegationTokenRenewal.java look fine.
In TestDTR:
1. I don't think it is a good idea to sleep for 10 seconds every time. If you 
feel it can take long then the currently specified time - increase the number 
of attempts, but not the attempt span. So in the good case we don't slow tests 
too much.
2. the attempt thing is really needed only in the first part of the test. In 
the second part we test negative case - it should never be renewed.
So one try or 3 seconds should suffice.

 


> Delegation token is obtained as the superuser
> ---------------------------------------------
>
>                 Key: MAPREDUCE-1532
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1532
>             Project: Hadoop Map/Reduce
>          Issue Type: Bug
>          Components: job submission, security
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Devaraj Das
>             Fix For: 0.22.0
>
>         Attachments: 1532-bp20.1.patch, 1532-bp20.2.patch
>
>
> When the UserGroupInformation.doAs is invoked for proxy users, the delegation 
> token is incorrectly obtained as the real user.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to