[jira] [Updated] (HADOOP-11054) Add a KeyProvider instantiation based on a URI

[ https://issues.apache.org/jira/browse/HADOOP-11054?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11054: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Commented] (HADOOP-11060) Create a CryptoCodec test that verifies interoperability between the JCE and OpenSSL implementations

[ https://issues.apache.org/jira/browse/HADOOP-11060?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14121513#comment-14121513 ] Alejandro Abdelnur commented on HADOOP-11060: - +1 > Create a CryptoCodec te

[jira] [Updated] (HADOOP-11060) Create a CryptoCodec test that verifies interoperability between the JCE and OpenSSL implementations

[ https://issues.apache.org/jira/browse/HADOOP-11060?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11060: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Created] (HADOOP-11062) CryptoCodec testcases requiring OpenSSL should be run only if -Pnative is used

Alejandro Abdelnur created HADOOP-11062: --- Summary: CryptoCodec testcases requiring OpenSSL should be run only if -Pnative is used Key: HADOOP-11062 URL: https://issues.apache.org/jira/browse/HADOOP-11062

[jira] [Commented] (HADOOP-11063) KMS cannot deploy on Windows, because class names are too long.

[ https://issues.apache.org/jira/browse/HADOOP-11063?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14121592#comment-14121592 ] Alejandro Abdelnur commented on HADOOP-11063: - [~cnauroth], no need to split

[jira] [Commented] (HADOOP-11063) KMS cannot deploy on Windows, because class names are too long.

[ https://issues.apache.org/jira/browse/HADOOP-11063?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14121688#comment-14121688 ] Alejandro Abdelnur commented on HADOOP-11063: - LGTM, +1 > KMS cannot deploy

[jira] [Updated] (HADOOP-11069) KMSClientProvider should use getAuthenticationMethod() to determine if in proxyuser mode or not

[ https://issues.apache.org/jira/browse/HADOOP-11069?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11069: Status: Patch Available (was: Open) > KMSClientProvider should use getAuthenticat

[jira] [Updated] (HADOOP-11069) KMSClientProvider should use getAuthenticationMethod() to determine if in proxyuser mode or not

[ https://issues.apache.org/jira/browse/HADOOP-11069?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11069: Attachment: HADOOP-11069.patch > KMSClientProvider should use getAuthenticationMet

[jira] [Created] (HADOOP-11069) KMSClientProvider should use getAuthenticationMethod() to determine if in proxyuser mode or not

Alejandro Abdelnur created HADOOP-11069: --- Summary: KMSClientProvider should use getAuthenticationMethod() to determine if in proxyuser mode or not Key: HADOOP-11069 URL: https://issues.apache.org/jira/browse

[jira] [Created] (HADOOP-11070) Create MiniKMS for testing

Alejandro Abdelnur created HADOOP-11070: --- Summary: Create MiniKMS for testing Key: HADOOP-11070 URL: https://issues.apache.org/jira/browse/HADOOP-11070 Project: Hadoop Common Issue Type

[jira] [Updated] (HADOOP-11070) Create MiniKMS for testing

[ https://issues.apache.org/jira/browse/HADOOP-11070?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11070: Attachment: HADOOP-11070.patch > Create MiniKMS for testing >

[jira] [Updated] (HADOOP-11070) Create MiniKMS for testing

[ https://issues.apache.org/jira/browse/HADOOP-11070?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11070: Status: Patch Available (was: Open) > Create MiniKMS for testing > --

[jira] [Created] (HADOOP-11071) KMSClientProvider should drain the local generated EEK cache on key rollover

Alejandro Abdelnur created HADOOP-11071: --- Summary: KMSClientProvider should drain the local generated EEK cache on key rollover Key: HADOOP-11071 URL: https://issues.apache.org/jira/browse/HADOOP-11071

[jira] [Updated] (HADOOP-11071) KMSClientProvider should drain the local generated EEK cache on key rollover

[ https://issues.apache.org/jira/browse/HADOOP-11071?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11071: Status: Patch Available (was: Open) > KMSClientProvider should drain the local ge

[jira] [Updated] (HADOOP-11071) KMSClientProvider should drain the local generated EEK cache on key rollover

[ https://issues.apache.org/jira/browse/HADOOP-11071?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11071: Attachment: HADOOP-11071.patch > KMSClientProvider should drain the local generate

[jira] [Updated] (HADOOP-11071) KMSClientProvider should drain the local generated EEK cache on key rollover

[ https://issues.apache.org/jira/browse/HADOOP-11071?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11071: Attachment: HADOOP-11071.patch new patch adding javadoc to drain(), removing getNe

[jira] [Commented] (HADOOP-11069) KMSClientProvider should use getAuthenticationMethod() to determine if in proxyuser mode or not

[ https://issues.apache.org/jira/browse/HADOOP-11069?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14123602#comment-14123602 ] Alejandro Abdelnur commented on HADOOP-11069: - test failures are due to 'Too

[jira] [Commented] (HADOOP-11067) warning message 'ssl.client.truststore.location has not been set' gets printed for hftp command

[ https://issues.apache.org/jira/browse/HADOOP-11067?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14123606#comment-14123606 ] Alejandro Abdelnur commented on HADOOP-11067: - [~arpitagarwal], i don't see

[jira] [Commented] (HADOOP-10758) KMS: add ACLs on per key basis.

[ https://issues.apache.org/jira/browse/HADOOP-10758?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14123645#comment-14123645 ] Alejandro Abdelnur commented on HADOOP-10758: - +1 > KMS: add ACLs on per ke

[jira] [Updated] (HADOOP-11070) Create MiniKMS for testing

[ https://issues.apache.org/jira/browse/HADOOP-11070?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11070: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Updated] (HADOOP-11069) KMSClientProvider should use getAuthenticationMethod() to determine if in proxyuser mode or not

[ https://issues.apache.org/jira/browse/HADOOP-11069?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11069: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Updated] (HADOOP-11071) KMSClientProvider should drain the local generated EEK cache on key rollover

[ https://issues.apache.org/jira/browse/HADOOP-11071?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11071: Attachment: HADOOP-11071.patch new patch, previous patch was not correct as the dr

[jira] [Updated] (HADOOP-11071) KMSClientProvider should drain the local generated EEK cache on key rollover

[ https://issues.apache.org/jira/browse/HADOOP-11071?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11071: Attachment: HADOOP-11071.patch There was some javadoc mis-formatting in the last p

[jira] [Commented] (HADOOP-11071) KMSClientProvider should drain the local generated EEK cache on key rollover

[ https://issues.apache.org/jira/browse/HADOOP-11071?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14125860#comment-14125860 ] Alejandro Abdelnur commented on HADOOP-11071: - Regarding addAll not being at

[jira] [Updated] (HADOOP-11071) KMSClientProvider should drain the local generated EEK cache on key rollover

[ https://issues.apache.org/jira/browse/HADOOP-11071?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11071: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Commented] (HADOOP-11075) hadoop-kms is not being published to maven

[ https://issues.apache.org/jira/browse/HADOOP-11075?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14127577#comment-14127577 ] Alejandro Abdelnur commented on HADOOP-11075: - [~cnauroth], HADOOP-11070 int

[jira] [Commented] (HADOOP-9989) Bug introduced in HADOOP-9374, which parses the -tokenCacheFile as binary file but set it to the configuration as JSON file.

[ https://issues.apache.org/jira/browse/HADOOP-9989?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14127608#comment-14127608 ] Alejandro Abdelnur commented on HADOOP-9989: After poking Zhiahi offline for

[jira] [Commented] (HADOOP-11077) NPE if hosts not specified in ProxyUsers

[ https://issues.apache.org/jira/browse/HADOOP-11077?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14127610#comment-14127610 ] Alejandro Abdelnur commented on HADOOP-11077: - +1 > NPE if hosts not specif

[jira] [Commented] (HADOOP-11075) hadoop-kms is not being published to maven

[ https://issues.apache.org/jira/browse/HADOOP-11075?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14127709#comment-14127709 ] Alejandro Abdelnur commented on HADOOP-11075: - +1 tested patch locally. I'll

[jira] [Commented] (HADOOP-10868) Create a ZooKeeper-backed secret provider

[ https://issues.apache.org/jira/browse/HADOOP-10868?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14127812#comment-14127812 ] Alejandro Abdelnur commented on HADOOP-10868: - *AuthenticationFilter.java*:

[jira] [Updated] (HADOOP-9989) Bug introduced in HADOOP-9374, which parses the -tokenCacheFile as binary file but set it to the configuration as JSON file.

[ https://issues.apache.org/jira/browse/HADOOP-9989?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-9989: --- Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed S

[jira] [Updated] (HADOOP-11077) NPE if hosts not specified in ProxyUsers

[ https://issues.apache.org/jira/browse/HADOOP-11077?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11077: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Commented] (HADOOP-10758) KMS: add ACLs on per key basis.

[ https://issues.apache.org/jira/browse/HADOOP-10758?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14129139#comment-14129139 ] Alejandro Abdelnur commented on HADOOP-10758: - +1 > KMS: add ACLs on per ke

[jira] [Comment Edited] (HADOOP-10758) KMS: add ACLs on per key basis.

[ https://issues.apache.org/jira/browse/HADOOP-10758?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14129139#comment-14129139 ] Alejandro Abdelnur edited comment on HADOOP-10758 at 9/10/14 9:26 PM:

[jira] [Updated] (HADOOP-10758) KMS: add ACLs on per key basis.

[ https://issues.apache.org/jira/browse/HADOOP-10758?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10758: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Created] (HADOOP-11083) After refactoring of HTTP proxyuser to common, doAs param is case sensitive

Alejandro Abdelnur created HADOOP-11083: --- Summary: After refactoring of HTTP proxyuser to common, doAs param is case sensitive Key: HADOOP-11083 URL: https://issues.apache.org/jira/browse/HADOOP-11083

[jira] [Assigned] (HADOOP-11083) After refactoring of HTTP proxyuser to common, doAs param is case sensitive

[ https://issues.apache.org/jira/browse/HADOOP-11083?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur reassigned HADOOP-11083: --- Assignee: Alejandro Abdelnur > After refactoring of HTTP proxyuser to commo

[jira] [Updated] (HADOOP-11083) After refactoring of HTTP proxyuser to common, doAs param is case sensitive

[ https://issues.apache.org/jira/browse/HADOOP-11083?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11083: Status: Patch Available (was: Open) > After refactoring of HTTP proxyuser to comm

[jira] [Updated] (HADOOP-11083) After refactoring of HTTP proxyuser to common, doAs param is case sensitive

[ https://issues.apache.org/jira/browse/HADOOP-11083?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11083: Attachment: HADOOP-11083.patch making doAs search case insensitive > After refact

[jira] [Commented] (HADOOP-11083) After refactoring of HTTP proxyuser to common, doAs param is case sensitive

[ https://issues.apache.org/jira/browse/HADOOP-11083?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14129556#comment-14129556 ] Alejandro Abdelnur commented on HADOOP-11083: - test failures are unrelated

[jira] [Commented] (HADOOP-11062) CryptoCodec testcases requiring OpenSSL should be run only if -Pnative is used

[ https://issues.apache.org/jira/browse/HADOOP-11062?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14129560#comment-14129560 ] Alejandro Abdelnur commented on HADOOP-11062: - indentation in the pom change

[jira] [Updated] (HADOOP-11083) After refactoring of HTTP proxyuser to common, doAs param is case sensitive

[ https://issues.apache.org/jira/browse/HADOOP-11083?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11083: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Commented] (HADOOP-10868) Create a ZooKeeper-backed secret provider

[ https://issues.apache.org/jira/browse/HADOOP-10868?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14130807#comment-14130807 ] Alejandro Abdelnur commented on HADOOP-10868: - *AuthenticationFilter.java:*

[jira] [Commented] (HADOOP-9989) Bug introduced in HADOOP-9374, which parses the -tokenCacheFile as binary file but set it to the configuration as JSON file.

[ https://issues.apache.org/jira/browse/HADOOP-9989?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14131776#comment-14131776 ] Alejandro Abdelnur commented on HADOOP-9989: also, is possible to use non-loc

[jira] [Commented] (HADOOP-9989) Bug introduced in HADOOP-9374, which parses the -tokenCacheFile as binary file but set it to the configuration as JSON file.

[ https://issues.apache.org/jira/browse/HADOOP-9989?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14131775#comment-14131775 ] Alejandro Abdelnur commented on HADOOP-9989: Zhihai, Please open a new JIRA

[jira] [Commented] (HADOOP-10868) Create a ZooKeeper-backed secret provider

[ https://issues.apache.org/jira/browse/HADOOP-10868?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14132739#comment-14132739 ] Alejandro Abdelnur commented on HADOOP-10868: - [~rkanter], your last trunk p

[jira] [Commented] (HADOOP-10868) Create a ZooKeeper-backed secret provider

[ https://issues.apache.org/jira/browse/HADOOP-10868?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14134107#comment-14134107 ] Alejandro Abdelnur commented on HADOOP-10868: - *JaasConfiguration.java*: *

[jira] [Commented] (HADOOP-10868) Create a ZooKeeper-backed secret provider

[ https://issues.apache.org/jira/browse/HADOOP-10868?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14134666#comment-14134666 ] Alejandro Abdelnur commented on HADOOP-10868: - +1 > Create a ZooKeeper-back

[jira] [Updated] (HADOOP-10868) Create a ZooKeeper-backed secret provider

[ https://issues.apache.org/jira/browse/HADOOP-10868?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10868: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Commented] (HADOOP-10868) Create a ZooKeeper-backed secret provider

[ https://issues.apache.org/jira/browse/HADOOP-10868?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14134855#comment-14134855 ] Alejandro Abdelnur commented on HADOOP-10868: - Thanks for catching this Robe

[jira] [Resolved] (HADOOP-11075) hadoop-kms is not being published to maven

[ https://issues.apache.org/jira/browse/HADOOP-11075?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur resolved HADOOP-11075. - Resolution: Duplicate Integrating this into HDFS-7006, will give credit to [~an

[jira] [Moved] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur moved HDFS-7074 to HADOOP-11096: --- Component/s: (was: security)

[jira] [Updated] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11096: Target Version/s: 2.6.0 Assignee: Arun Suresh (was: Alejandro Abdelnur

[jira] [Assigned] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur reassigned HADOOP-11096: --- Assignee: Alejandro Abdelnur (was: Arun Suresh) > KMS: KeyAuthorizationKey

[jira] [Updated] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11096: Attachment: HADOOP-11096.patch > KMS: KeyAuthorizationKeyProvider should verify th

[jira] [Updated] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11096: Status: Patch Available (was: Open) > KMS: KeyAuthorizationKeyProvider should ver

[jira] [Commented] (HADOOP-11097) kms docs say proxyusers, not proxyuser for config params

[ https://issues.apache.org/jira/browse/HADOOP-11097?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14136397#comment-14136397 ] Alejandro Abdelnur commented on HADOOP-11097: - +1 > kms docs say proxyusers

[jira] [Assigned] (HADOOP-11016) KMS should support signing cookies with zookeeper secret manager

[ https://issues.apache.org/jira/browse/HADOOP-11016?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur reassigned HADOOP-11016: --- Assignee: Alejandro Abdelnur (was: Arun Suresh) > KMS should support signi

[jira] [Created] (HADOOP-11099) KMS return HTTP UNAUTHORIZED 401 on ACL failure

Alejandro Abdelnur created HADOOP-11099: --- Summary: KMS return HTTP UNAUTHORIZED 401 on ACL failure Key: HADOOP-11099 URL: https://issues.apache.org/jira/browse/HADOOP-11099 Project: Hadoop Common

[jira] [Updated] (HADOOP-11099) KMS return HTTP UNAUTHORIZED 401 on ACL failure

[ https://issues.apache.org/jira/browse/HADOOP-11099?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11099: Attachment: HADOOP-11099.patch > KMS return HTTP UNAUTHORIZED 401 on ACL failure >

[jira] [Updated] (HADOOP-11099) KMS return HTTP UNAUTHORIZED 401 on ACL failure

[ https://issues.apache.org/jira/browse/HADOOP-11099?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11099: Status: Patch Available (was: Open) no new testcase, existing testcases are exerc

[jira] [Updated] (HADOOP-11016) KMS should support signing cookies with zookeeper secret manager

[ https://issues.apache.org/jira/browse/HADOOP-11016?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11016: Attachment: HADOOP-11016.patch The patch is exclusively documentation and a testca

[jira] [Commented] (HADOOP-11062) CryptoCodec testcases requiring OpenSSL should be run only if -Pnative is used

[ https://issues.apache.org/jira/browse/HADOOP-11062?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14136772#comment-14136772 ] Alejandro Abdelnur commented on HADOOP-11062: - +1 > CryptoCodec testcases r

[jira] [Commented] (HADOOP-11062) CryptoCodec testcases requiring OpenSSL should be run only if -Pnative is used

[ https://issues.apache.org/jira/browse/HADOOP-11062?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14136775#comment-14136775 ] Alejandro Abdelnur commented on HADOOP-11062: - [~asuresh], would you please

[jira] [Resolved] (HADOOP-11018) KMS should load multiple kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-11018?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur resolved HADOOP-11018. - Resolution: Duplicate > KMS should load multiple kerberos principals > -

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Summary: KMS: Support for multiple Kerberos principals (was: Multiple Kerberos pr

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Description: The Key Management Server should support multiple Kerberos principals

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: HADOOP-10982.patch > KMS: Support for multiple Kerberos principals > -

[jira] [Commented] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14136832#comment-14136832 ] Alejandro Abdelnur commented on HADOOP-10982: - blocked because of documentat

[jira] [Commented] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14136839#comment-14136839 ] Alejandro Abdelnur commented on HADOOP-11096: - test failures are due to 'too

[jira] [Updated] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11096: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Resolved] (HADOOP-11097) kms docs say proxyusers, not proxyuser for config params

[ https://issues.apache.org/jira/browse/HADOOP-11097?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur resolved HADOOP-11097. - Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed Thanks

[jira] [Updated] (HADOOP-11062) CryptoCodec testcases requiring OpenSSL should be run only if -Pnative is used

[ https://issues.apache.org/jira/browse/HADOOP-11062?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11062: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Commented] (HADOOP-11099) KMS return HTTP UNAUTHORIZED 401 on ACL failure

[ https://issues.apache.org/jira/browse/HADOOP-11099?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14137639#comment-14137639 ] Alejandro Abdelnur commented on HADOOP-11099: - [~hitliuyi], the {{KMSExcepti

[jira] [Updated] (HADOOP-11099) KMS return HTTP UNAUTHORIZED 401 on ACL failure

[ https://issues.apache.org/jira/browse/HADOOP-11099?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11099: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Updated] (HADOOP-11016) KMS should support signing cookies with zookeeper secret manager

[ https://issues.apache.org/jira/browse/HADOOP-11016?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11016: Status: Patch Available (was: Open) > KMS should support signing cookies with zoo

[jira] [Updated] (HADOOP-11016) KMS should support signing cookies with zookeeper secret manager

[ https://issues.apache.org/jira/browse/HADOOP-11016?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11016: Attachment: HADOOP-11016.patch rebased. > KMS should support signing cookies with

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: HADOOP-10982.patch new patch addressing feedback. will wait till HADOO

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Status: Patch Available (was: Open) > KMS: Support for multiple Kerberos principa

[jira] [Updated] (HADOOP-11016) KMS should support signing cookies with zookeeper secret manager

[ https://issues.apache.org/jira/browse/HADOOP-11016?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11016: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: HADOOP-10982.patch rebasing > KMS: Support for multiple Kerberos prin

[jira] [Commented] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139074#comment-14139074 ] Alejandro Abdelnur commented on HADOOP-10982: - the test failure reports "jav

[jira] [Commented] (HADOOP-11017) KMS delegation token secret manager should be able to use zookeeper as store

[ https://issues.apache.org/jira/browse/HADOOP-11017?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139129#comment-14139129 ] Alejandro Abdelnur commented on HADOOP-11017: - Initial pass of feedback, jus

[jira] [Commented] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139245#comment-14139245 ] Alejandro Abdelnur commented on HADOOP-10982: - OK, this is weird, I've logge

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: HADOOP-10982.patch Version of the patch without testcase changes, whic

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: DUMMY.patch g, still failing. going for a dummy patch that adds a

[jira] [Issue Comment Deleted] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Comment: was deleted (was: g, still failing. going for a dummy patch that adds

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: (was: DUMMY.patch) > KMS: Support for multiple Kerberos principals

[jira] [Commented] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139616#comment-14139616 ] Alejandro Abdelnur commented on HADOOP-10982: - OK, testpatch is gaga, the KM

[jira] [Commented] (HADOOP-11017) KMS delegation token secret manager should be able to use zookeeper as store

[ https://issues.apache.org/jira/browse/HADOOP-11017?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139644#comment-14139644 ] Alejandro Abdelnur commented on HADOOP-11017: - another partial pass on the l

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Created] (HADOOP-11108) KMS: add testcase for multiple kerberos principals.

Alejandro Abdelnur created HADOOP-11108: --- Summary: KMS: add testcase for multiple kerberos principals. Key: HADOOP-11108 URL: https://issues.apache.org/jira/browse/HADOOP-11108 Project: Hadoop Co

[jira] [Commented] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139677#comment-14139677 ] Alejandro Abdelnur commented on HADOOP-10982: - created HADOOP-11108 for the

[jira] [Updated] (HADOOP-11108) KMS: add testcase for multiple kerberos principals.

[ https://issues.apache.org/jira/browse/HADOOP-11108?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11108: Status: Patch Available (was: Open) > KMS: add testcase for multiple kerberos pri

[jira] [Updated] (HADOOP-11108) KMS: add testcase for multiple kerberos principals.

[ https://issues.apache.org/jira/browse/HADOOP-11108?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11108: Attachment: HADOOP-11108.patch > KMS: add testcase for multiple kerberos principal

[jira] [Commented] (HADOOP-11109) Site build is broken

[ https://issues.apache.org/jira/browse/HADOOP-11109?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139964#comment-14139964 ] Alejandro Abdelnur commented on HADOOP-11109: - Jian, ATM, thanks for the qui

[jira] [Commented] (HADOOP-10970) Cleanup KMS configuration keys

[ https://issues.apache.org/jira/browse/HADOOP-10970?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139989#comment-14139989 ] Alejandro Abdelnur commented on HADOOP-10970: - +1 > Cleanup KMS configurati

[jira] [Commented] (HADOOP-11017) KMS delegation token secret manager should be able to use zookeeper as store

[ https://issues.apache.org/jira/browse/HADOOP-11017?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14140813#comment-14140813 ] Alejandro Abdelnur commented on HADOOP-11017: - *AbstractDelegationTokenSecre

[jira] [Updated] (HADOOP-11112) TestKMSWithZK does not use KEY_PROVIDER_URI

[ https://issues.apache.org/jira/browse/HADOOP-2?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-2: Status: Patch Available (was: Open) > TestKMSWithZK does not use KEY_PROVIDER_URI

[jira] [Updated] (HADOOP-11112) TestKMSWithZK does not use KEY_PROVIDER_URI

[ https://issues.apache.org/jira/browse/HADOOP-2?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-2: Attachment: HADOOP-2.patch without this the testcase fails. > TestKMSWithZK d

<    4   5   6   7   8   9   10   11   12   13   >