[
https://issues.apache.org/jira/browse/MAPREDUCE-5663?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13870200#comment-13870200
]
Alejandro Abdelnur commented on MAPREDUCE-5663:
-----------------------------------------------
[~sseth], for MR this is fully cooked.
It works something like this:
* On the AM client side you collect all the tokens you need and write them to
HDFS using the Credentials.writeTokenStorageFile() method to HDFS.
* the HADOOP_TOKEN_FILE_LOCATION env variable pointing to such file is set to
the AM environment.
* Then when calling UGI.getLoginUser() on the AM, the UGI credentials should be
populated with the contents of the token file writen by the AM client.
> Add an interface to Input/Ouput Formats to obtain delegation tokens
> -------------------------------------------------------------------
>
> Key: MAPREDUCE-5663
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-5663
> Project: Hadoop Map/Reduce
> Issue Type: Improvement
> Reporter: Siddharth Seth
> Assignee: Michael Weng
> Attachments: MAPREDUCE-5663.4.txt, MAPREDUCE-5663.5.txt,
> MAPREDUCE-5663.6.txt, MAPREDUCE-5663.patch.txt, MAPREDUCE-5663.patch.txt2,
> MAPREDUCE-5663.patch.txt3
>
>
> Currently, delegation tokens are obtained as part of the getSplits /
> checkOutputSpecs calls to the InputFormat / OutputFormat respectively.
> This works as long as the splits are generated on a node with kerberos
> credentials. For split generation elsewhere (AM for example), an explicit
> interface is required.
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
