[jira] [Commented] (HDFS-5842) Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster
[
https://issues.apache.org/jira/browse/HDFS-5842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13886499#comment-13886499
]
Hudson commented on HDFS-5842:
--
SUCCESS: Integrated in Hadoop-Yarn-trunk #466 (See
[https://builds.apache.org/job/Hadoop-Yarn-trunk/466/])
Update CHANGES.txt to move HDFS-5842 to 2.3.0 (wang:
http://svn.apache.org/viewcvs.cgi/?root=Apache-SVNview=revrev=1562656)
* /hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt
HDFS-5842. Cannot create hftp filesystem when using a proxy user ugi and a doAs
on a secure cluster. Contributed by Jing Zhao. (jing9:
http://svn.apache.org/viewcvs.cgi/?root=Apache-SVNview=revrev=1562603)
* /hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt
*
/hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/tools/DelegationTokenFetcher.java
*
/hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/web/HftpFileSystem.java
Cannot create hftp filesystem when using a proxy user ugi and a doAs on a
secure cluster
Key: HDFS-5842
URL: https://issues.apache.org/jira/browse/HDFS-5842
Project: Hadoop HDFS
Issue Type: Bug
Components: security
Affects Versions: 2.2.0
Reporter: Arpit Gupta
Assignee: Jing Zhao
Fix For: 2.3.0
Attachments: HADOOP-10215.000.patch, HADOOP-10215.001.patch,
HADOOP-10215.002.patch, HADOOP-10215.002.patch
Noticed this while debugging issues in another application. We saw an error
when trying to do a FileSystem.get using an hftp file system on a secure
cluster using a proxy user ugi.
This is a small snippet used
{code}
FileSystem testFS = ugi.doAs(new PrivilegedExceptionActionFileSystem() {
@Override
public FileSystem run() throws IOException {
return FileSystem.get(hadoopConf);
}
});
{code}
The same code worked for hdfs and webhdfs but not for hftp when the ugi used
was UserGroupInformation.createProxyUser
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
[jira] [Commented] (HDFS-5842) Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster
[
https://issues.apache.org/jira/browse/HDFS-5842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13886565#comment-13886565
]
Hudson commented on HDFS-5842:
--
FAILURE: Integrated in Hadoop-Mapreduce-trunk #1683 (See
[https://builds.apache.org/job/Hadoop-Mapreduce-trunk/1683/])
Update CHANGES.txt to move HDFS-5842 to 2.3.0 (wang:
http://svn.apache.org/viewcvs.cgi/?root=Apache-SVNview=revrev=1562656)
* /hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt
HDFS-5842. Cannot create hftp filesystem when using a proxy user ugi and a doAs
on a secure cluster. Contributed by Jing Zhao. (jing9:
http://svn.apache.org/viewcvs.cgi/?root=Apache-SVNview=revrev=1562603)
* /hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt
*
/hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/tools/DelegationTokenFetcher.java
*
/hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/web/HftpFileSystem.java
Cannot create hftp filesystem when using a proxy user ugi and a doAs on a
secure cluster
Key: HDFS-5842
URL: https://issues.apache.org/jira/browse/HDFS-5842
Project: Hadoop HDFS
Issue Type: Bug
Components: security
Affects Versions: 2.2.0
Reporter: Arpit Gupta
Assignee: Jing Zhao
Fix For: 2.3.0
Attachments: HADOOP-10215.000.patch, HADOOP-10215.001.patch,
HADOOP-10215.002.patch, HADOOP-10215.002.patch
Noticed this while debugging issues in another application. We saw an error
when trying to do a FileSystem.get using an hftp file system on a secure
cluster using a proxy user ugi.
This is a small snippet used
{code}
FileSystem testFS = ugi.doAs(new PrivilegedExceptionActionFileSystem() {
@Override
public FileSystem run() throws IOException {
return FileSystem.get(hadoopConf);
}
});
{code}
The same code worked for hdfs and webhdfs but not for hftp when the ugi used
was UserGroupInformation.createProxyUser
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
[jira] [Commented] (HDFS-5842) Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster
[
https://issues.apache.org/jira/browse/HDFS-5842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13886583#comment-13886583
]
Hudson commented on HDFS-5842:
--
SUCCESS: Integrated in Hadoop-Hdfs-trunk #1658 (See
[https://builds.apache.org/job/Hadoop-Hdfs-trunk/1658/])
Update CHANGES.txt to move HDFS-5842 to 2.3.0 (wang:
http://svn.apache.org/viewcvs.cgi/?root=Apache-SVNview=revrev=1562656)
* /hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt
HDFS-5842. Cannot create hftp filesystem when using a proxy user ugi and a doAs
on a secure cluster. Contributed by Jing Zhao. (jing9:
http://svn.apache.org/viewcvs.cgi/?root=Apache-SVNview=revrev=1562603)
* /hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt
*
/hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/tools/DelegationTokenFetcher.java
*
/hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/web/HftpFileSystem.java
Cannot create hftp filesystem when using a proxy user ugi and a doAs on a
secure cluster
Key: HDFS-5842
URL: https://issues.apache.org/jira/browse/HDFS-5842
Project: Hadoop HDFS
Issue Type: Bug
Components: security
Affects Versions: 2.2.0
Reporter: Arpit Gupta
Assignee: Jing Zhao
Fix For: 2.3.0
Attachments: HADOOP-10215.000.patch, HADOOP-10215.001.patch,
HADOOP-10215.002.patch, HADOOP-10215.002.patch
Noticed this while debugging issues in another application. We saw an error
when trying to do a FileSystem.get using an hftp file system on a secure
cluster using a proxy user ugi.
This is a small snippet used
{code}
FileSystem testFS = ugi.doAs(new PrivilegedExceptionActionFileSystem() {
@Override
public FileSystem run() throws IOException {
return FileSystem.get(hadoopConf);
}
});
{code}
The same code worked for hdfs and webhdfs but not for hftp when the ugi used
was UserGroupInformation.createProxyUser
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
[jira] [Commented] (HDFS-5842) Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster
[
https://issues.apache.org/jira/browse/HDFS-5842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13885626#comment-13885626
]
Jing Zhao commented on HDFS-5842:
-
The failed test has been reported in HDFS-5718 and should be unrelated.
Cannot create hftp filesystem when using a proxy user ugi and a doAs on a
secure cluster
Key: HDFS-5842
URL: https://issues.apache.org/jira/browse/HDFS-5842
Project: Hadoop HDFS
Issue Type: Bug
Components: security
Affects Versions: 2.2.0
Reporter: Arpit Gupta
Assignee: Jing Zhao
Attachments: HADOOP-10215.000.patch, HADOOP-10215.001.patch,
HADOOP-10215.002.patch, HADOOP-10215.002.patch
Noticed this while debugging issues in another application. We saw an error
when trying to do a FileSystem.get using an hftp file system on a secure
cluster using a proxy user ugi.
This is a small snippet used
{code}
FileSystem testFS = ugi.doAs(new PrivilegedExceptionActionFileSystem() {
@Override
public FileSystem run() throws IOException {
return FileSystem.get(hadoopConf);
}
});
{code}
The same code worked for hdfs and webhdfs but not for hftp when the ugi used
was UserGroupInformation.createProxyUser
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
[jira] [Commented] (HDFS-5842) Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster
[
https://issues.apache.org/jira/browse/HDFS-5842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13885661#comment-13885661
]
Jitendra Nath Pandey commented on HDFS-5842:
checkTGTAndReloginFromKeytab is removed, it will cause issues once TGT expires.
Cannot create hftp filesystem when using a proxy user ugi and a doAs on a
secure cluster
Key: HDFS-5842
URL: https://issues.apache.org/jira/browse/HDFS-5842
Project: Hadoop HDFS
Issue Type: Bug
Components: security
Affects Versions: 2.2.0
Reporter: Arpit Gupta
Assignee: Jing Zhao
Attachments: HADOOP-10215.000.patch, HADOOP-10215.001.patch,
HADOOP-10215.002.patch, HADOOP-10215.002.patch
Noticed this while debugging issues in another application. We saw an error
when trying to do a FileSystem.get using an hftp file system on a secure
cluster using a proxy user ugi.
This is a small snippet used
{code}
FileSystem testFS = ugi.doAs(new PrivilegedExceptionActionFileSystem() {
@Override
public FileSystem run() throws IOException {
return FileSystem.get(hadoopConf);
}
});
{code}
The same code worked for hdfs and webhdfs but not for hftp when the ugi used
was UserGroupInformation.createProxyUser
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
[jira] [Commented] (HDFS-5842) Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster
[
https://issues.apache.org/jira/browse/HDFS-5842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13885668#comment-13885668
]
Jing Zhao commented on HDFS-5842:
-
Thanks for the review, Jitendra. So checkTGTAndReloginFromKeytab is always
called in URLConnectionFactory#openConnection, which is called by
getDT/renewDT/cancelDT. Thus I think we do not need to call
checkTGTAndReloginFromKeytab multiple times here.
Cannot create hftp filesystem when using a proxy user ugi and a doAs on a
secure cluster
Key: HDFS-5842
URL: https://issues.apache.org/jira/browse/HDFS-5842
Project: Hadoop HDFS
Issue Type: Bug
Components: security
Affects Versions: 2.2.0
Reporter: Arpit Gupta
Assignee: Jing Zhao
Attachments: HADOOP-10215.000.patch, HADOOP-10215.001.patch,
HADOOP-10215.002.patch, HADOOP-10215.002.patch
Noticed this while debugging issues in another application. We saw an error
when trying to do a FileSystem.get using an hftp file system on a secure
cluster using a proxy user ugi.
This is a small snippet used
{code}
FileSystem testFS = ugi.doAs(new PrivilegedExceptionActionFileSystem() {
@Override
public FileSystem run() throws IOException {
return FileSystem.get(hadoopConf);
}
});
{code}
The same code worked for hdfs and webhdfs but not for hftp when the ugi used
was UserGroupInformation.createProxyUser
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
[jira] [Commented] (HDFS-5842) Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster
[
https://issues.apache.org/jira/browse/HDFS-5842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13885685#comment-13885685
]
Jitendra Nath Pandey commented on HDFS-5842:
bq. URLConnectionFactory#openConnection, which is called by
getDT/renewDT/cancelDT. Thus I think we do not need to call
checkTGTAndReloginFromKeytab multiple times here.
Okay, sounds good. +1 for the patch.
Cannot create hftp filesystem when using a proxy user ugi and a doAs on a
secure cluster
Key: HDFS-5842
URL: https://issues.apache.org/jira/browse/HDFS-5842
Project: Hadoop HDFS
Issue Type: Bug
Components: security
Affects Versions: 2.2.0
Reporter: Arpit Gupta
Assignee: Jing Zhao
Attachments: HADOOP-10215.000.patch, HADOOP-10215.001.patch,
HADOOP-10215.002.patch, HADOOP-10215.002.patch
Noticed this while debugging issues in another application. We saw an error
when trying to do a FileSystem.get using an hftp file system on a secure
cluster using a proxy user ugi.
This is a small snippet used
{code}
FileSystem testFS = ugi.doAs(new PrivilegedExceptionActionFileSystem() {
@Override
public FileSystem run() throws IOException {
return FileSystem.get(hadoopConf);
}
});
{code}
The same code worked for hdfs and webhdfs but not for hftp when the ugi used
was UserGroupInformation.createProxyUser
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
[jira] [Commented] (HDFS-5842) Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster
[
https://issues.apache.org/jira/browse/HDFS-5842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13885893#comment-13885893
]
Hudson commented on HDFS-5842:
--
SUCCESS: Integrated in Hadoop-trunk-Commit #5061 (See
[https://builds.apache.org/job/Hadoop-trunk-Commit/5061/])
HDFS-5842. Cannot create hftp filesystem when using a proxy user ugi and a doAs
on a secure cluster. Contributed by Jing Zhao. (jing9:
http://svn.apache.org/viewcvs.cgi/?root=Apache-SVNview=revrev=1562603)
* /hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt
*
/hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/tools/DelegationTokenFetcher.java
*
/hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/web/HftpFileSystem.java
Cannot create hftp filesystem when using a proxy user ugi and a doAs on a
secure cluster
Key: HDFS-5842
URL: https://issues.apache.org/jira/browse/HDFS-5842
Project: Hadoop HDFS
Issue Type: Bug
Components: security
Affects Versions: 2.2.0
Reporter: Arpit Gupta
Assignee: Jing Zhao
Attachments: HADOOP-10215.000.patch, HADOOP-10215.001.patch,
HADOOP-10215.002.patch, HADOOP-10215.002.patch
Noticed this while debugging issues in another application. We saw an error
when trying to do a FileSystem.get using an hftp file system on a secure
cluster using a proxy user ugi.
This is a small snippet used
{code}
FileSystem testFS = ugi.doAs(new PrivilegedExceptionActionFileSystem() {
@Override
public FileSystem run() throws IOException {
return FileSystem.get(hadoopConf);
}
});
{code}
The same code worked for hdfs and webhdfs but not for hftp when the ugi used
was UserGroupInformation.createProxyUser
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
[jira] [Commented] (HDFS-5842) Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster
[
https://issues.apache.org/jira/browse/HDFS-5842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13885986#comment-13885986
]
Andrew Wang commented on HDFS-5842:
---
Should this be included in branch-2.3 as well?
Cannot create hftp filesystem when using a proxy user ugi and a doAs on a
secure cluster
Key: HDFS-5842
URL: https://issues.apache.org/jira/browse/HDFS-5842
Project: Hadoop HDFS
Issue Type: Bug
Components: security
Affects Versions: 2.2.0
Reporter: Arpit Gupta
Assignee: Jing Zhao
Fix For: 2.4.0
Attachments: HADOOP-10215.000.patch, HADOOP-10215.001.patch,
HADOOP-10215.002.patch, HADOOP-10215.002.patch
Noticed this while debugging issues in another application. We saw an error
when trying to do a FileSystem.get using an hftp file system on a secure
cluster using a proxy user ugi.
This is a small snippet used
{code}
FileSystem testFS = ugi.doAs(new PrivilegedExceptionActionFileSystem() {
@Override
public FileSystem run() throws IOException {
return FileSystem.get(hadoopConf);
}
});
{code}
The same code worked for hdfs and webhdfs but not for hftp when the ugi used
was UserGroupInformation.createProxyUser
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
[jira] [Commented] (HDFS-5842) Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster
[
https://issues.apache.org/jira/browse/HDFS-5842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13886017#comment-13886017
]
Jing Zhao commented on HDFS-5842:
-
Yeah, that will be great. Thanks Andrew!
Cannot create hftp filesystem when using a proxy user ugi and a doAs on a
secure cluster
Key: HDFS-5842
URL: https://issues.apache.org/jira/browse/HDFS-5842
Project: Hadoop HDFS
Issue Type: Bug
Components: security
Affects Versions: 2.2.0
Reporter: Arpit Gupta
Assignee: Jing Zhao
Fix For: 2.4.0
Attachments: HADOOP-10215.000.patch, HADOOP-10215.001.patch,
HADOOP-10215.002.patch, HADOOP-10215.002.patch
Noticed this while debugging issues in another application. We saw an error
when trying to do a FileSystem.get using an hftp file system on a secure
cluster using a proxy user ugi.
This is a small snippet used
{code}
FileSystem testFS = ugi.doAs(new PrivilegedExceptionActionFileSystem() {
@Override
public FileSystem run() throws IOException {
return FileSystem.get(hadoopConf);
}
});
{code}
The same code worked for hdfs and webhdfs but not for hftp when the ugi used
was UserGroupInformation.createProxyUser
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
[jira] [Commented] (HDFS-5842) Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster
[
https://issues.apache.org/jira/browse/HDFS-5842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13886100#comment-13886100
]
Hudson commented on HDFS-5842:
--
SUCCESS: Integrated in Hadoop-trunk-Commit #5065 (See
[https://builds.apache.org/job/Hadoop-trunk-Commit/5065/])
Update CHANGES.txt to move HDFS-5842 to 2.3.0 (wang:
http://svn.apache.org/viewcvs.cgi/?root=Apache-SVNview=revrev=1562656)
* /hadoop/common/trunk/hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt
Cannot create hftp filesystem when using a proxy user ugi and a doAs on a
secure cluster
Key: HDFS-5842
URL: https://issues.apache.org/jira/browse/HDFS-5842
Project: Hadoop HDFS
Issue Type: Bug
Components: security
Affects Versions: 2.2.0
Reporter: Arpit Gupta
Assignee: Jing Zhao
Fix For: 2.3.0
Attachments: HADOOP-10215.000.patch, HADOOP-10215.001.patch,
HADOOP-10215.002.patch, HADOOP-10215.002.patch
Noticed this while debugging issues in another application. We saw an error
when trying to do a FileSystem.get using an hftp file system on a secure
cluster using a proxy user ugi.
This is a small snippet used
{code}
FileSystem testFS = ugi.doAs(new PrivilegedExceptionActionFileSystem() {
@Override
public FileSystem run() throws IOException {
return FileSystem.get(hadoopConf);
}
});
{code}
The same code worked for hdfs and webhdfs but not for hftp when the ugi used
was UserGroupInformation.createProxyUser
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
[jira] [Commented] (HDFS-5842) Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster
[
https://issues.apache.org/jira/browse/HDFS-5842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13883511#comment-13883511
]
Hadoop QA commented on HDFS-5842:
-
{color:red}-1 overall{color}. Here are the results of testing the latest
attachment
http://issues.apache.org/jira/secure/attachment/12625416/HADOOP-10215.002.patch
against trunk revision .
{color:green}+1 @author{color}. The patch does not contain any @author
tags.
{color:red}-1 tests included{color}. The patch doesn't appear to include
any new or modified tests.
Please justify why no new tests are needed for this
patch.
Also please list what manual steps were performed to
verify this patch.
{color:green}+1 javac{color}. The applied patch does not increase the
total number of javac compiler warnings.
{color:green}+1 javadoc{color}. The javadoc tool did not generate any
warning messages.
{color:green}+1 eclipse:eclipse{color}. The patch built with
eclipse:eclipse.
{color:green}+1 findbugs{color}. The patch does not introduce any new
Findbugs (version 1.3.9) warnings.
{color:green}+1 release audit{color}. The applied patch does not increase
the total number of release audit warnings.
{color:green}+1 core tests{color}. The patch passed unit tests in
hadoop-hdfs-project/hadoop-hdfs.
{color:green}+1 contrib tests{color}. The patch passed contrib unit tests.
Test results:
https://builds.apache.org/job/PreCommit-HADOOP-Build/3480//testReport/
Console output:
https://builds.apache.org/job/PreCommit-HADOOP-Build/3480//console
This message is automatically generated.
Cannot create hftp filesystem when using a proxy user ugi and a doAs on a
secure cluster
Key: HDFS-5842
URL: https://issues.apache.org/jira/browse/HDFS-5842
Project: Hadoop HDFS
Issue Type: Bug
Components: security
Affects Versions: 2.2.0
Reporter: Arpit Gupta
Assignee: Jing Zhao
Attachments: HADOOP-10215.000.patch, HADOOP-10215.001.patch,
HADOOP-10215.002.patch, HADOOP-10215.002.patch
Noticed this while debugging issues in another application. We saw an error
when trying to do a FileSystem.get using an hftp file system on a secure
cluster using a proxy user ugi.
This is a small snippet used
{code}
FileSystem testFS = ugi.doAs(new PrivilegedExceptionActionFileSystem() {
@Override
public FileSystem run() throws IOException {
return FileSystem.get(hadoopConf);
}
});
{code}
The same code worked for hdfs and webhdfs but not for hftp when the ugi used
was UserGroupInformation.createProxyUser
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
[jira] [Commented] (HDFS-5842) Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster
[
https://issues.apache.org/jira/browse/HDFS-5842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13883650#comment-13883650
]
Hadoop QA commented on HDFS-5842:
-
{color:red}-1 overall{color}. Here are the results of testing the latest
attachment
http://issues.apache.org/jira/secure/attachment/12625416/HADOOP-10215.002.patch
against trunk revision .
{color:green}+1 @author{color}. The patch does not contain any @author
tags.
{color:red}-1 tests included{color}. The patch doesn't appear to include
any new or modified tests.
Please justify why no new tests are needed for this
patch.
Also please list what manual steps were performed to
verify this patch.
{color:green}+1 javac{color}. The applied patch does not increase the
total number of javac compiler warnings.
{color:green}+1 javadoc{color}. The javadoc tool did not generate any
warning messages.
{color:green}+1 eclipse:eclipse{color}. The patch built with
eclipse:eclipse.
{color:green}+1 findbugs{color}. The patch does not introduce any new
Findbugs (version 1.3.9) warnings.
{color:green}+1 release audit{color}. The applied patch does not increase
the total number of release audit warnings.
{color:red}-1 core tests{color}. The patch failed these unit tests in
hadoop-hdfs-project/hadoop-hdfs:
org.apache.hadoop.hdfs.web.TestHttpsFileSystem
org.apache.hadoop.hdfs.server.namenode.TestNameNodeHttpServer
{color:green}+1 contrib tests{color}. The patch passed contrib unit tests.
Test results:
https://builds.apache.org/job/PreCommit-HDFS-Build/5955//testReport/
Console output: https://builds.apache.org/job/PreCommit-HDFS-Build/5955//console
This message is automatically generated.
Cannot create hftp filesystem when using a proxy user ugi and a doAs on a
secure cluster
Key: HDFS-5842
URL: https://issues.apache.org/jira/browse/HDFS-5842
Project: Hadoop HDFS
Issue Type: Bug
Components: security
Affects Versions: 2.2.0
Reporter: Arpit Gupta
Assignee: Jing Zhao
Attachments: HADOOP-10215.000.patch, HADOOP-10215.001.patch,
HADOOP-10215.002.patch, HADOOP-10215.002.patch
Noticed this while debugging issues in another application. We saw an error
when trying to do a FileSystem.get using an hftp file system on a secure
cluster using a proxy user ugi.
This is a small snippet used
{code}
FileSystem testFS = ugi.doAs(new PrivilegedExceptionActionFileSystem() {
@Override
public FileSystem run() throws IOException {
return FileSystem.get(hadoopConf);
}
});
{code}
The same code worked for hdfs and webhdfs but not for hftp when the ugi used
was UserGroupInformation.createProxyUser
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
