[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15900196#comment-15900196 ] Alejandro Abdelnur commented on HADOOP-13805: - Hi [~daryn], The exception w

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15870923#comment-15870923 ] Alejandro Abdelnur commented on HADOOP-13805: - I've got confirmation the pat

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15839844#comment-15839844 ] Alejandro Abdelnur commented on HADOOP-13805: - patch9 lgtm, +1. It would be

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15837592#comment-15837592 ] Alejandro Abdelnur commented on HADOOP-13805: - patch8 looks good. A few th

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15823796#comment-15823796 ] Alejandro Abdelnur commented on HADOOP-13805: - [~yzhangal], I understand you

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15811981#comment-15811981 ] Alejandro Abdelnur commented on HADOOP-13805: - [~xiaochen], Unless I'm miss

[jira] [Commented] (HADOOP-13807) UGI renewal thread should be spawn only if the keytab is not external

[ https://issues.apache.org/jira/browse/HADOOP-13807?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15797839#comment-15797839 ] Alejandro Abdelnur commented on HADOOP-13807: - [~xiaochen], the message wa

[jira] [Updated] (HADOOP-13807) UGI renewal thread should be spawn only if the keytab is not external

[ https://issues.apache.org/jira/browse/HADOOP-13807?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-13807: Summary: UGI renewal thread should be spawn only if the keytab is not external (w

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15797799#comment-15797799 ] Alejandro Abdelnur commented on HADOOP-13805: - [~xiaochen], {{kinit -R}} a

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15741459#comment-15741459 ] Alejandro Abdelnur commented on HADOOP-13805: - [~xiaochen], sorry missed you

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15671471#comment-15671471 ] Alejandro Abdelnur commented on HADOOP-13805: - Patch LGTM, I was missing the

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15666971#comment-15666971 ] Alejandro Abdelnur commented on HADOOP-13805: - [~xiaochen], If you create

[jira] [Updated] (HADOOP-13807) UGI renewal thread should be spawn only if the keytaab is not external

[ https://issues.apache.org/jira/browse/HADOOP-13807?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-13807: Description: The renewal thread should not be spawned if the keytab is external.

[jira] [Commented] (HADOOP-13807) UGI renewal thread should be spawn only if the keytaab is not external

[ https://issues.apache.org/jira/browse/HADOOP-13807?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15654094#comment-15654094 ] Alejandro Abdelnur commented on HADOOP-13807: - The following method in the

[jira] [Created] (HADOOP-13807) UGI renewal thread should be spawn only if the keytaab is not external

Alejandro Abdelnur created HADOOP-13807: --- Summary: UGI renewal thread should be spawn only if the keytaab is not external Key: HADOOP-13807 URL: https://issues.apache.org/jira/browse/HADOOP-13807

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15653489#comment-15653489 ] Alejandro Abdelnur commented on HADOOP-13805: - A quick way to verify the pro

[jira] [Updated] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-13805: Description: HADOOP-13558 intention was to avoid UGI from trying to renew the TGT

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15653479#comment-15653479 ] Alejandro Abdelnur commented on HADOOP-13805: - The solution, and I think is

[jira] [Updated] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-13805: Description: HADOOP-13558 intention was to avoid UGI from trying to renew the TGT

[jira] [Created] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

Alejandro Abdelnur created HADOOP-13805: --- Summary: UGI.getCurrentUser() fails if user does not have a keytab associated Key: HADOOP-13805 URL: https://issues.apache.org/jira/browse/HADOOP-13805

[jira] [Comment Edited] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15652339#comment-15652339 ] Alejandro Abdelnur edited comment on HADOOP-13558 at 11/9/16 11:15 PM: ---

[jira] [Commented] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15652339#comment-15652339 ] Alejandro Abdelnur commented on HADOOP-13558: - [~zhz], I'm still running int

[jira] [Commented] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15457339#comment-15457339 ] Alejandro Abdelnur commented on HADOOP-13558: - got it, thx. +1 > UserGroupI

[jira] [Commented] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=1548#comment-1548 ] Alejandro Abdelnur commented on HADOOP-13558: - LGTM, still i'm struggling wi

[jira] [Commented] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15452457#comment-15452457 ] Alejandro Abdelnur commented on HADOOP-13558: - [~lmccay], [~ste...@apache.or

[jira] [Commented] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15450181#comment-15450181 ] Alejandro Abdelnur commented on HADOOP-13558: - Looking a bit more I think [~

[jira] [Commented] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15446915#comment-15446915 ] Alejandro Abdelnur commented on HADOOP-13558: - [~xiaochen], i think, when gi

[jira] [Updated] (HADOOP-13557) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13557?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-13557: Summary: UserGroupInformation created from a Subject incorrectly tries to renew th

[jira] [Updated] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13558?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-13558: Summary: UserGroupInformation created from a Subject incorrectly tries to renew th

[jira] [Commented] (HADOOP-13557) UserGroupInformation created from a Subject incorrectly tries to renew the Keberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13557?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15446854#comment-15446854 ] Alejandro Abdelnur commented on HADOOP-13557: - Thanks [~xiaochen], jira hang

[jira] [Created] (HADOOP-13557) UserGroupInformation created from a Subject incorrectly tries to renew the Keberos ticket

Alejandro Abdelnur created HADOOP-13557: --- Summary: UserGroupInformation created from a Subject incorrectly tries to renew the Keberos ticket Key: HADOOP-13557 URL: https://issues.apache.org/jira/browse/HADOO

[jira] [Created] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Keberos ticket

Alejandro Abdelnur created HADOOP-13558: --- Summary: UserGroupInformation created from a Subject incorrectly tries to renew the Keberos ticket Key: HADOOP-13558 URL: https://issues.apache.org/jira/browse/HADOO

[jira] [Commented] (HADOOP-10101) Update guava dependency to the latest version

[ https://issues.apache.org/jira/browse/HADOOP-10101?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14297466#comment-14297466 ] Alejandro Abdelnur commented on HADOOP-10101: - got it, thx > Update guava d

[jira] [Commented] (HADOOP-10101) Update guava dependency to the latest version

[ https://issues.apache.org/jira/browse/HADOOP-10101?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14297320#comment-14297320 ] Alejandro Abdelnur commented on HADOOP-10101: - Am I missing something here?

[jira] [Commented] (HADOOP-11343) Overflow is not properly handled in caclulating final iv for AES CTR

[ https://issues.apache.org/jira/browse/HADOOP-11343?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14233348#comment-14233348 ] Alejandro Abdelnur commented on HADOOP-11343: - Got the issue now. +1 to [~yo

[jira] [Commented] (HADOOP-11343) Overflow is not properly handled in caclulating final iv for AES CTR

[ https://issues.apache.org/jira/browse/HADOOP-11343?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14232644#comment-14232644 ] Alejandro Abdelnur commented on HADOOP-11343: - If I recall correctly, if we

[jira] [Commented] (HADOOP-10895) HTTP KerberosAuthenticator fallback should have a flag to disable it

[ https://issues.apache.org/jira/browse/HADOOP-10895?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14200489#comment-14200489 ] Alejandro Abdelnur commented on HADOOP-10895: - The name of the properties an

[jira] [Commented] (HADOOP-10895) HTTP KerberosAuthenticator fallback should have a flag to disable it

[ https://issues.apache.org/jira/browse/HADOOP-10895?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14199303#comment-14199303 ] Alejandro Abdelnur commented on HADOOP-10895: - Modifying the {{Authenticator

[jira] [Commented] (HADOOP-11260) Patch up Jetty to disable SSLv3

[ https://issues.apache.org/jira/browse/HADOOP-11260?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14195716#comment-14195716 ] Alejandro Abdelnur commented on HADOOP-11260: - +1, LGTM. I assume testing SS

[jira] [Commented] (HADOOP-10895) HTTP KerberosAuthenticator fallback should have a flag to disable it

[ https://issues.apache.org/jira/browse/HADOOP-10895?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14194998#comment-14194998 ] Alejandro Abdelnur commented on HADOOP-10895: - Robert, I'm not suggesting ch

[jira] [Commented] (HADOOP-10895) HTTP KerberosAuthenticator fallback should have a flag to disable it

[ https://issues.apache.org/jira/browse/HADOOP-10895?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14194887#comment-14194887 ] Alejandro Abdelnur commented on HADOOP-10895: - Because the {{AuthenticatedUR

[jira] [Commented] (HADOOP-10895) HTTP KerberosAuthenticator fallback should have a flag to disable it

[ https://issues.apache.org/jira/browse/HADOOP-10895?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14194747#comment-14194747 ] Alejandro Abdelnur commented on HADOOP-10895: - IMO, the fallback is a concer

[jira] [Commented] (HADOOP-10895) HTTP KerberosAuthenticator fallback should have a flag to disable it

[ https://issues.apache.org/jira/browse/HADOOP-10895?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14194227#comment-14194227 ] Alejandro Abdelnur commented on HADOOP-10895: - i agree with Yi, in having

[jira] [Commented] (HADOOP-10895) HTTP KerberosAuthenticator fallback should have a flag to disable it

[ https://issues.apache.org/jira/browse/HADOOP-10895?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14176382#comment-14176382 ] Alejandro Abdelnur commented on HADOOP-10895: - yongjun, go ahead, take it (c

[jira] [Commented] (HADOOP-11200) HttpFS proxyuser, doAs param is case sensitive

[ https://issues.apache.org/jira/browse/HADOOP-11200?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14170448#comment-14170448 ] Alejandro Abdelnur commented on HADOOP-11200: - yes, in branch-2, it should b

[jira] [Commented] (HADOOP-11200) HttpFS proxyuser, doAs param is case sensitive

[ https://issues.apache.org/jira/browse/HADOOP-11200?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14170437#comment-14170437 ] Alejandro Abdelnur commented on HADOOP-11200: - [~lmccay], HADOOP-11083 fixed

[jira] [Updated] (HADOOP-11017) KMS delegation token secret manager should be able to use zookeeper as store

[ https://issues.apache.org/jira/browse/HADOOP-11017?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11017: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Commented] (HADOOP-11017) KMS delegation token secret manager should be able to use zookeeper as store

[ https://issues.apache.org/jira/browse/HADOOP-11017?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14142042#comment-14142042 ] Alejandro Abdelnur commented on HADOOP-11017: - +1 > KMS delegation token se

[jira] [Commented] (HADOOP-11017) KMS delegation token secret manager should be able to use zookeeper as store

[ https://issues.apache.org/jira/browse/HADOOP-11017?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14141695#comment-14141695 ] Alejandro Abdelnur commented on HADOOP-11017: - *SecretManager.java*: * the

[jira] [Created] (HADOOP-11112) TestKMSWithZK does not use KEY_PROVIDER_URI

Alejandro Abdelnur created HADOOP-2: --- Summary: TestKMSWithZK does not use KEY_PROVIDER_URI Key: HADOOP-2 URL: https://issues.apache.org/jira/browse/HADOOP-2 Project: Hadoop Common

[jira] [Updated] (HADOOP-11112) TestKMSWithZK does not use KEY_PROVIDER_URI

[ https://issues.apache.org/jira/browse/HADOOP-2?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-2: Attachment: HADOOP-2.patch without this the testcase fails. > TestKMSWithZK d

[jira] [Updated] (HADOOP-11112) TestKMSWithZK does not use KEY_PROVIDER_URI

[ https://issues.apache.org/jira/browse/HADOOP-2?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-2: Status: Patch Available (was: Open) > TestKMSWithZK does not use KEY_PROVIDER_URI

[jira] [Commented] (HADOOP-11017) KMS delegation token secret manager should be able to use zookeeper as store

[ https://issues.apache.org/jira/browse/HADOOP-11017?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14140813#comment-14140813 ] Alejandro Abdelnur commented on HADOOP-11017: - *AbstractDelegationTokenSecre

[jira] [Commented] (HADOOP-10970) Cleanup KMS configuration keys

[ https://issues.apache.org/jira/browse/HADOOP-10970?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139989#comment-14139989 ] Alejandro Abdelnur commented on HADOOP-10970: - +1 > Cleanup KMS configurati

[jira] [Commented] (HADOOP-11109) Site build is broken

[ https://issues.apache.org/jira/browse/HADOOP-11109?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139964#comment-14139964 ] Alejandro Abdelnur commented on HADOOP-11109: - Jian, ATM, thanks for the qui

[jira] [Updated] (HADOOP-11108) KMS: add testcase for multiple kerberos principals.

[ https://issues.apache.org/jira/browse/HADOOP-11108?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11108: Attachment: HADOOP-11108.patch > KMS: add testcase for multiple kerberos principal

[jira] [Updated] (HADOOP-11108) KMS: add testcase for multiple kerberos principals.

[ https://issues.apache.org/jira/browse/HADOOP-11108?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11108: Status: Patch Available (was: Open) > KMS: add testcase for multiple kerberos pri

[jira] [Commented] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139677#comment-14139677 ] Alejandro Abdelnur commented on HADOOP-10982: - created HADOOP-11108 for the

[jira] [Created] (HADOOP-11108) KMS: add testcase for multiple kerberos principals.

Alejandro Abdelnur created HADOOP-11108: --- Summary: KMS: add testcase for multiple kerberos principals. Key: HADOOP-11108 URL: https://issues.apache.org/jira/browse/HADOOP-11108 Project: Hadoop Co

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Commented] (HADOOP-11017) KMS delegation token secret manager should be able to use zookeeper as store

[ https://issues.apache.org/jira/browse/HADOOP-11017?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139644#comment-14139644 ] Alejandro Abdelnur commented on HADOOP-11017: - another partial pass on the l

[jira] [Commented] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139616#comment-14139616 ] Alejandro Abdelnur commented on HADOOP-10982: - OK, testpatch is gaga, the KM

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: (was: DUMMY.patch) > KMS: Support for multiple Kerberos principals

[jira] [Issue Comment Deleted] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Comment: was deleted (was: g, still failing. going for a dummy patch that adds

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: DUMMY.patch g, still failing. going for a dummy patch that adds a

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: HADOOP-10982.patch Version of the patch without testcase changes, whic

[jira] [Commented] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139245#comment-14139245 ] Alejandro Abdelnur commented on HADOOP-10982: - OK, this is weird, I've logge

[jira] [Commented] (HADOOP-11017) KMS delegation token secret manager should be able to use zookeeper as store

[ https://issues.apache.org/jira/browse/HADOOP-11017?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139129#comment-14139129 ] Alejandro Abdelnur commented on HADOOP-11017: - Initial pass of feedback, jus

[jira] [Commented] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139074#comment-14139074 ] Alejandro Abdelnur commented on HADOOP-10982: - the test failure reports "jav

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: HADOOP-10982.patch rebasing > KMS: Support for multiple Kerberos prin

[jira] [Updated] (HADOOP-11016) KMS should support signing cookies with zookeeper secret manager

[ https://issues.apache.org/jira/browse/HADOOP-11016?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11016: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Status: Patch Available (was: Open) > KMS: Support for multiple Kerberos principa

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: HADOOP-10982.patch new patch addressing feedback. will wait till HADOO

[jira] [Updated] (HADOOP-11016) KMS should support signing cookies with zookeeper secret manager

[ https://issues.apache.org/jira/browse/HADOOP-11016?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11016: Attachment: HADOOP-11016.patch rebased. > KMS should support signing cookies with

[jira] [Updated] (HADOOP-11016) KMS should support signing cookies with zookeeper secret manager

[ https://issues.apache.org/jira/browse/HADOOP-11016?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11016: Status: Patch Available (was: Open) > KMS should support signing cookies with zoo

[jira] [Updated] (HADOOP-11099) KMS return HTTP UNAUTHORIZED 401 on ACL failure

[ https://issues.apache.org/jira/browse/HADOOP-11099?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11099: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Commented] (HADOOP-11099) KMS return HTTP UNAUTHORIZED 401 on ACL failure

[ https://issues.apache.org/jira/browse/HADOOP-11099?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14137639#comment-14137639 ] Alejandro Abdelnur commented on HADOOP-11099: - [~hitliuyi], the {{KMSExcepti

[jira] [Updated] (HADOOP-11062) CryptoCodec testcases requiring OpenSSL should be run only if -Pnative is used

[ https://issues.apache.org/jira/browse/HADOOP-11062?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11062: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Resolved] (HADOOP-11097) kms docs say proxyusers, not proxyuser for config params

[ https://issues.apache.org/jira/browse/HADOOP-11097?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur resolved HADOOP-11097. - Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed Thanks

[jira] [Updated] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11096: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Commented] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14136839#comment-14136839 ] Alejandro Abdelnur commented on HADOOP-11096: - test failures are due to 'too

[jira] [Commented] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14136832#comment-14136832 ] Alejandro Abdelnur commented on HADOOP-10982: - blocked because of documentat

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: HADOOP-10982.patch > KMS: Support for multiple Kerberos principals > -

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Description: The Key Management Server should support multiple Kerberos principals

[jira] [Resolved] (HADOOP-11018) KMS should load multiple kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-11018?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur resolved HADOOP-11018. - Resolution: Duplicate > KMS should load multiple kerberos principals > -

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Summary: KMS: Support for multiple Kerberos principals (was: Multiple Kerberos pr

[jira] [Commented] (HADOOP-11062) CryptoCodec testcases requiring OpenSSL should be run only if -Pnative is used

[ https://issues.apache.org/jira/browse/HADOOP-11062?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14136775#comment-14136775 ] Alejandro Abdelnur commented on HADOOP-11062: - [~asuresh], would you please

[jira] [Commented] (HADOOP-11062) CryptoCodec testcases requiring OpenSSL should be run only if -Pnative is used

[ https://issues.apache.org/jira/browse/HADOOP-11062?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14136772#comment-14136772 ] Alejandro Abdelnur commented on HADOOP-11062: - +1 > CryptoCodec testcases r

[jira] [Updated] (HADOOP-11016) KMS should support signing cookies with zookeeper secret manager

[ https://issues.apache.org/jira/browse/HADOOP-11016?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11016: Attachment: HADOOP-11016.patch The patch is exclusively documentation and a testca

[jira] [Updated] (HADOOP-11099) KMS return HTTP UNAUTHORIZED 401 on ACL failure

[ https://issues.apache.org/jira/browse/HADOOP-11099?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11099: Status: Patch Available (was: Open) no new testcase, existing testcases are exerc

[jira] [Updated] (HADOOP-11099) KMS return HTTP UNAUTHORIZED 401 on ACL failure

[ https://issues.apache.org/jira/browse/HADOOP-11099?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11099: Attachment: HADOOP-11099.patch > KMS return HTTP UNAUTHORIZED 401 on ACL failure >

[jira] [Created] (HADOOP-11099) KMS return HTTP UNAUTHORIZED 401 on ACL failure

Alejandro Abdelnur created HADOOP-11099: --- Summary: KMS return HTTP UNAUTHORIZED 401 on ACL failure Key: HADOOP-11099 URL: https://issues.apache.org/jira/browse/HADOOP-11099 Project: Hadoop Common

[jira] [Assigned] (HADOOP-11016) KMS should support signing cookies with zookeeper secret manager

[ https://issues.apache.org/jira/browse/HADOOP-11016?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur reassigned HADOOP-11016: --- Assignee: Alejandro Abdelnur (was: Arun Suresh) > KMS should support signi

[jira] [Commented] (HADOOP-11097) kms docs say proxyusers, not proxyuser for config params

[ https://issues.apache.org/jira/browse/HADOOP-11097?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14136397#comment-14136397 ] Alejandro Abdelnur commented on HADOOP-11097: - +1 > kms docs say proxyusers

[jira] [Updated] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11096: Status: Patch Available (was: Open) > KMS: KeyAuthorizationKeyProvider should ver

[jira] [Updated] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11096: Attachment: HADOOP-11096.patch > KMS: KeyAuthorizationKeyProvider should verify th

[jira] [Assigned] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur reassigned HADOOP-11096: --- Assignee: Alejandro Abdelnur (was: Arun Suresh) > KMS: KeyAuthorizationKey

[jira] [Updated] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11096: Target Version/s: 2.6.0 Assignee: Arun Suresh (was: Alejandro Abdelnur

[jira] [Moved] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur moved HDFS-7074 to HADOOP-11096: --- Component/s: (was: security)

[jira] [Resolved] (HADOOP-11075) hadoop-kms is not being published to maven

[ https://issues.apache.org/jira/browse/HADOOP-11075?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur resolved HADOOP-11075. - Resolution: Duplicate Integrating this into HDFS-7006, will give credit to [~an

  1   2   3   4   5   6   7   8   9   10   >