[
https://issues.apache.org/jira/browse/HDFS-15778?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17268125#comment-17268125
]
Larry McCay commented on HDFS-15778:
------------------------------------
Hi [~pushpendrasingh]!
I assume this is a broader issue with the Hadoop/dfs java client not expecting
to be challenged for authentication.
I believe this is based on the fact that it expects the redirect to the DN to
only use the block access token rather than any other set of credentials.
Since Knox doesn't differentiate the DN endpoint from the NN endpoint, the
authentication configured for the hosting topology is used universally.
A change to the java client would not only address distcp but any other dfs CLI
command that currently needs to interact with DNs.
Did you plan to provide such a patch here?
> distcp supports basic/kerberos authentication over knox gateway
> ----------------------------------------------------------------
>
> Key: HDFS-15778
> URL: https://issues.apache.org/jira/browse/HDFS-15778
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: distcp
> Affects Versions: 3.2.2
> Reporter: Pushpendra Singh
> Priority: Minor
>
> Distcp doesnt support copying data using basic/Kerberos authentication using
> knox gateway.
> If the source/target cluster has secured (basic auth or kerberos auth) knox
> gateway configured, distcp cannot be used to copy the data.
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
