[jira] Commented: (MAPREDUCE-1532) Delegation token is obtained as the superuser
[ https://issues.apache.org/jira/browse/MAPREDUCE-1532?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12864631#action_12864631 ] Devaraj Das commented on MAPREDUCE-1532: Thanks Chris for the review. On 5/5/10 7:18 PM, "Chris Douglas (JIRA)" wrote: [ https://issues.apache.org/jira/browse/MAPREDUCE-1532?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12864621#action_12864621 ] Chris Douglas commented on MAPREDUCE-1532: -- +1 -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. > Delegation token is obtained as the superuser > - > > Key: MAPREDUCE-1532 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-1532 > Project: Hadoop Map/Reduce > Issue Type: Bug > Components: job submission, security >Affects Versions: 0.22.0 >Reporter: Devaraj Das >Assignee: Devaraj Das > Fix For: 0.22.0 > > Attachments: 1532-bp20.1.patch, 1532-bp20.2.patch, > 1532-bp20.4.1.patch, 1532-bp20.4.2.patch, 1532-bp20.4.patch, 1532.1.patch, > 1532.2.patch > > > When the UserGroupInformation.doAs is invoked for proxy users, the delegation > token is incorrectly obtained as the real user. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
[jira] Commented: (MAPREDUCE-1532) Delegation token is obtained as the superuser
[ https://issues.apache.org/jira/browse/MAPREDUCE-1532?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12864621#action_12864621 ] Chris Douglas commented on MAPREDUCE-1532: -- +1 > Delegation token is obtained as the superuser > - > > Key: MAPREDUCE-1532 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-1532 > Project: Hadoop Map/Reduce > Issue Type: Bug > Components: job submission, security >Affects Versions: 0.22.0 >Reporter: Devaraj Das >Assignee: Devaraj Das > Fix For: 0.22.0 > > Attachments: 1532-bp20.1.patch, 1532-bp20.2.patch, > 1532-bp20.4.1.patch, 1532-bp20.4.2.patch, 1532-bp20.4.patch, 1532.1.patch, > 1532.2.patch > > > When the UserGroupInformation.doAs is invoked for proxy users, the delegation > token is incorrectly obtained as the real user. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
[jira] Commented: (MAPREDUCE-1532) Delegation token is obtained as the superuser
[ https://issues.apache.org/jira/browse/MAPREDUCE-1532?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12858101#action_12858101 ] Hadoop QA commented on MAPREDUCE-1532: -- +1 overall. Here are the results of testing the latest attachment http://issues.apache.org/jira/secure/attachment/12442031/1532.2.patch against trunk revision 935090. +1 @author. The patch does not contain any @author tags. +1 tests included. The patch appears to include 3 new or modified tests. +1 javadoc. The javadoc tool did not generate any warning messages. +1 javac. The applied patch does not increase the total number of javac compiler warnings. +1 findbugs. The patch does not introduce any new Findbugs warnings. +1 release audit. The applied patch does not increase the total number of release audit warnings. +1 core tests. The patch passed core unit tests. +1 contrib tests. The patch passed contrib unit tests. Test results: http://hudson.zones.apache.org/hudson/job/Mapreduce-Patch-h4.grid.sp2.yahoo.net/117/testReport/ Findbugs warnings: http://hudson.zones.apache.org/hudson/job/Mapreduce-Patch-h4.grid.sp2.yahoo.net/117/artifact/trunk/build/test/findbugs/newPatchFindbugsWarnings.html Checkstyle results: http://hudson.zones.apache.org/hudson/job/Mapreduce-Patch-h4.grid.sp2.yahoo.net/117/artifact/trunk/build/test/checkstyle-errors.html Console output: http://hudson.zones.apache.org/hudson/job/Mapreduce-Patch-h4.grid.sp2.yahoo.net/117/console This message is automatically generated. > Delegation token is obtained as the superuser > - > > Key: MAPREDUCE-1532 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-1532 > Project: Hadoop Map/Reduce > Issue Type: Bug > Components: job submission, security >Affects Versions: 0.22.0 >Reporter: Devaraj Das >Assignee: Devaraj Das > Fix For: 0.22.0 > > Attachments: 1532-bp20.1.patch, 1532-bp20.2.patch, > 1532-bp20.4.1.patch, 1532-bp20.4.2.patch, 1532-bp20.4.patch, 1532.1.patch, > 1532.2.patch > > > When the UserGroupInformation.doAs is invoked for proxy users, the delegation > token is incorrectly obtained as the real user. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (MAPREDUCE-1532) Delegation token is obtained as the superuser
[ https://issues.apache.org/jira/browse/MAPREDUCE-1532?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12838712#action_12838712 ] Boris Shkolnik commented on MAPREDUCE-1532: --- I've reviewed DelegationTokenRenewal related parts. Changes to DelegationTokenRenewal.java look fine. In TestDTR: 1. I don't think it is a good idea to sleep for 10 seconds every time. If you feel it can take long then the currently specified time - increase the number of attempts, but not the attempt span. So in the good case we don't slow tests too much. 2. the attempt thing is really needed only in the first part of the test. In the second part we test negative case - it should never be renewed. So one try or 3 seconds should suffice. > Delegation token is obtained as the superuser > - > > Key: MAPREDUCE-1532 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-1532 > Project: Hadoop Map/Reduce > Issue Type: Bug > Components: job submission, security >Affects Versions: 0.22.0 >Reporter: Devaraj Das >Assignee: Devaraj Das > Fix For: 0.22.0 > > Attachments: 1532-bp20.1.patch, 1532-bp20.2.patch, 1532-bp20.4.patch > > > When the UserGroupInformation.doAs is invoked for proxy users, the delegation > token is incorrectly obtained as the real user. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
[jira] Commented: (MAPREDUCE-1532) Delegation token is obtained as the superuser
[ https://issues.apache.org/jira/browse/MAPREDUCE-1532?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12838609#action_12838609 ] Boris Shkolnik commented on MAPREDUCE-1532: --- I've reviewed DelegationTokenRenewal related parts. Changes to DelegationTokenRenewal.java look fine. In TestDTR: 1. I don't think it is a good idea to sleep for 10 seconds every time. If you feel it can take long then the currently specified time - increase the number of attempts, but not the attempt span. So in the good case we don't slow tests too much. 2. the attempt thing is really needed only in the first part of the test. In the second part we test negative case - it should never be renewed. So one try or 3 seconds should suffice. > Delegation token is obtained as the superuser > - > > Key: MAPREDUCE-1532 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-1532 > Project: Hadoop Map/Reduce > Issue Type: Bug > Components: job submission, security >Affects Versions: 0.22.0 >Reporter: Devaraj Das >Assignee: Devaraj Das > Fix For: 0.22.0 > > Attachments: 1532-bp20.1.patch, 1532-bp20.2.patch > > > When the UserGroupInformation.doAs is invoked for proxy users, the delegation > token is incorrectly obtained as the real user. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.
