Apache Hadoop qbt Report: branch2.10+JDK7 on Linux/x86

2020-05-20 Thread Apache Jenkins Server
For more details, see https://builds.apache.org/job/hadoop-qbt-branch-2.10-java7-linux-x86/692/ No changes [Error replacing 'FILE' - Workspace is not accessible] - To unsubscribe, e-mail:

Apache Hadoop qbt Report: trunk+JDK8 on Linux/x86_64

2020-05-20 Thread Apache Jenkins Server
For more details, see https://ci-hadoop.apache.org/job/hadoop-qbt-trunk-java8-linux-x86_64/148/ [May 20, 2020 2:39:40 AM] (Yiqun Lin) HDFS-15340. RBF: Implement BalanceProcedureScheduler basic framework. Contributed by Jinglun. [May 20, 2020 6:06:52 AM] (pjoseph) YARN-9606. Set sslfactory for

Re: [DISCUSS] Secure Hadoop without Kerberos

2020-05-20 Thread Eric Yang
See my comments inline: On Wed, May 20, 2020 at 4:50 PM Rajive Chittajallu wrote: > On Wed, May 20, 2020 at 1:47 PM Eric Yang wrote: > > > >> > Kerberos was developed decade before web development becomes popular. > >> > There are some Kerberos limitations which does not work well in > Hadoop.

Re: [DISCUSS] Secure Hadoop without Kerberos

2020-05-20 Thread Rajive Chittajallu
On Wed, May 20, 2020 at 1:47 PM Eric Yang wrote: > >> > Kerberos was developed decade before web development becomes popular. >> > There are some Kerberos limitations which does not work well in Hadoop. A >> > few examples of corner cases: >> >> Microsoft Active Directory, which is extensively

Re: [DISCUSS] Secure Hadoop without Kerberos

2020-05-20 Thread Rajive Chittajallu
On Wed, May 6, 2020 at 3:32 PM Eric Yang wrote: > > Hi all, > > Kerberos was developed decade before web development becomes popular. > There are some Kerberos limitations which does not work well in Hadoop. A > few examples of corner cases: Microsoft Active Directory, which is extensively used

Re: [EXTERNAL] Re: [DISCUSS] Secure Hadoop without Kerberos

2020-05-20 Thread Craig . Condit
I have to strongly disagree with making UGI.doAs() private. Just because you feel that impersonation isn't an important feature, does not make it so for all users. There are many valid use cases which require impersonation, and in fact I consider this to be one of the differentiating features

Re: [DISCUSS] Secure Hadoop without Kerberos

2020-05-20 Thread Eric Yang
Hi Akira, Thank you for the information. Knox plays a main role in reverse proxy for Hadoop cluster. I understand the importance to keep Knox running to centralize audit log for ingress into the cluster. Other reverse proxy solution like Nginx are more feature rich for caching static contents

Apache Hadoop qbt Report: trunk+JDK8 on Linux/x86_64

2020-05-20 Thread Apache Jenkins Server
For more details, see https://ci-hadoop.apache.org/job/hadoop-qbt-trunk-java8-linux-x86_64/147/ [May 19, 2020 3:45:54 AM] (noreply) HADOOP-17004. ABFS: Improve the ABFS driver documentation [May 19, 2020 5:27:12 AM] (noreply) HADOOP-17024. ListStatus on ViewFS root (ls "/") should list the

[jira] [Resolved] (HADOOP-16900) Very large files can be truncated when written through S3AFileSystem

2020-05-20 Thread Steve Loughran (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-16900?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Steve Loughran resolved HADOOP-16900. - Fix Version/s: 3.4.0 Resolution: Fixed in trunk; rebuilding and retesting

[jira] [Created] (HADOOP-17050) Add support for multiple delegation tokens in S3AFilesystem

2020-05-20 Thread Gabor Bota (Jira)
Gabor Bota created HADOOP-17050: --- Summary: Add support for multiple delegation tokens in S3AFilesystem Key: HADOOP-17050 URL: https://issues.apache.org/jira/browse/HADOOP-17050 Project: Hadoop Common