You are viewing a plain text version of this content. The canonical link for it is here.
Posted to hdfs-issues@hadoop.apache.org by "Kan Zhang (JIRA)" <ji...@apache.org> on 2010/09/01 00:23:55 UTC
[jira] Created: (HDFS-1364) HFTP client should support relogin from
keytab
HFTP client should support relogin from keytab
----------------------------------------------
Key: HDFS-1364
URL: https://issues.apache.org/jira/browse/HDFS-1364
Project: Hadoop HDFS
Issue Type: Bug
Components: security
Reporter: Kan Zhang
Assignee: Kan Zhang
If a user starts a long-running HFTP client using a keytab, we should do relogin automatically whenever TGT expires. Currently, HFTP client uses TGT to fetch a delegation token and cache that delegation token for HFTP operations. The delegation token is automatically renewed/refetched using TGT. However, when TGT expires, delegation token renewal/refetch will fail and no further HFTP operation is possible. This is unsatisfactory since the user has given us her keytab. We should be able to relogin from keytab and continue.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Resolved: (HDFS-1364) HFTP client should support relogin
from keytab
Posted by "Devaraj Das (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HDFS-1364?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Devaraj Das resolved HDFS-1364.
-------------------------------
Fix Version/s: 0.22.0
Resolution: Fixed
I just committed this. Thanks, Jitendra!
> HFTP client should support relogin from keytab
> ----------------------------------------------
>
> Key: HDFS-1364
> URL: https://issues.apache.org/jira/browse/HDFS-1364
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: security
> Reporter: Kan Zhang
> Assignee: Jitendra Nath Pandey
> Fix For: 0.22.0
>
> Attachments: HDFS-1364-y20.1.patch, HDFS-1364-y20.2.patch, HDFS-1364.1.patch, HDFS-1364.2.patch
>
>
> If a user starts a long-running HFTP client using a keytab, we should do relogin automatically whenever TGT expires. Currently, HFTP client uses TGT to fetch a delegation token and cache that delegation token for HFTP operations. The delegation token is automatically renewed/refetched using TGT. However, when TGT expires, delegation token renewal/refetch will fail and no further HFTP operation is possible. This is unsatisfactory since the user has given us her keytab. We should be able to relogin from keytab and continue.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (HDFS-1364) HFTP client should support relogin from
keytab
Posted by "Jitendra Nath Pandey (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HDFS-1364?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jitendra Nath Pandey updated HDFS-1364:
---------------------------------------
Attachment: HDFS-1364.2.patch
> HFTP client should support relogin from keytab
> ----------------------------------------------
>
> Key: HDFS-1364
> URL: https://issues.apache.org/jira/browse/HDFS-1364
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: security
> Reporter: Kan Zhang
> Assignee: Jitendra Nath Pandey
> Attachments: HDFS-1364-y20.1.patch, HDFS-1364-y20.2.patch, HDFS-1364.1.patch, HDFS-1364.2.patch
>
>
> If a user starts a long-running HFTP client using a keytab, we should do relogin automatically whenever TGT expires. Currently, HFTP client uses TGT to fetch a delegation token and cache that delegation token for HFTP operations. The delegation token is automatically renewed/refetched using TGT. However, when TGT expires, delegation token renewal/refetch will fail and no further HFTP operation is possible. This is unsatisfactory since the user has given us her keytab. We should be able to relogin from keytab and continue.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (HDFS-1364) HFTP client should support relogin from
keytab
Posted by "Jitendra Nath Pandey (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HDFS-1364?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jitendra Nath Pandey updated HDFS-1364:
---------------------------------------
Attachment: HDFS-1364-y20.1.patch
Patch for hadoop-20 branch.
> HFTP client should support relogin from keytab
> ----------------------------------------------
>
> Key: HDFS-1364
> URL: https://issues.apache.org/jira/browse/HDFS-1364
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: security
> Reporter: Kan Zhang
> Assignee: Jitendra Nath Pandey
> Attachments: HDFS-1364-y20.1.patch
>
>
> If a user starts a long-running HFTP client using a keytab, we should do relogin automatically whenever TGT expires. Currently, HFTP client uses TGT to fetch a delegation token and cache that delegation token for HFTP operations. The delegation token is automatically renewed/refetched using TGT. However, when TGT expires, delegation token renewal/refetch will fail and no further HFTP operation is possible. This is unsatisfactory since the user has given us her keytab. We should be able to relogin from keytab and continue.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (HDFS-1364) HFTP client should support relogin from
keytab
Posted by "Jitendra Nath Pandey (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HDFS-1364?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jitendra Nath Pandey updated HDFS-1364:
---------------------------------------
Attachment: HDFS-1364.1.patch
Patch for trunk. This patch is dependent on HADOOP-6965
> HFTP client should support relogin from keytab
> ----------------------------------------------
>
> Key: HDFS-1364
> URL: https://issues.apache.org/jira/browse/HDFS-1364
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: security
> Reporter: Kan Zhang
> Assignee: Jitendra Nath Pandey
> Attachments: HDFS-1364-y20.1.patch, HDFS-1364-y20.2.patch, HDFS-1364.1.patch
>
>
> If a user starts a long-running HFTP client using a keytab, we should do relogin automatically whenever TGT expires. Currently, HFTP client uses TGT to fetch a delegation token and cache that delegation token for HFTP operations. The delegation token is automatically renewed/refetched using TGT. However, when TGT expires, delegation token renewal/refetch will fail and no further HFTP operation is possible. This is unsatisfactory since the user has given us her keytab. We should be able to relogin from keytab and continue.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (HDFS-1364) HFTP client should support relogin
from keytab
Posted by "Jitendra Nath Pandey (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HDFS-1364?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12915463#action_12915463 ]
Jitendra Nath Pandey commented on HDFS-1364:
--------------------------------------------
ant tests and test-patch were run manually.
[exec] -1 overall.
[exec]
[exec] +1 @author. The patch does not contain any @author tags.
[exec]
[exec] -1 tests included. The patch doesn't appear to include any new or modified tests.
[exec] Please justify why no new tests are needed for this patch.
[exec] Also please list what manual steps were performed to verify this patch.
[exec]
[exec] +1 javadoc. The javadoc tool did not generate any warning messages.
[exec]
[exec] +1 javac. The applied patch does not increase the total number of javac compiler warnings.
[exec]
[exec] +1 findbugs. The patch does not introduce any new Findbugs warnings.
[exec]
[exec] +1 release audit. The applied patch does not increase the total number of release audit warnings.
[exec]
[exec] +1 system tests framework. The patch passed system tests framework compile.
> HFTP client should support relogin from keytab
> ----------------------------------------------
>
> Key: HDFS-1364
> URL: https://issues.apache.org/jira/browse/HDFS-1364
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: security
> Reporter: Kan Zhang
> Assignee: Jitendra Nath Pandey
> Attachments: HDFS-1364-y20.1.patch, HDFS-1364-y20.2.patch, HDFS-1364.1.patch, HDFS-1364.2.patch
>
>
> If a user starts a long-running HFTP client using a keytab, we should do relogin automatically whenever TGT expires. Currently, HFTP client uses TGT to fetch a delegation token and cache that delegation token for HFTP operations. The delegation token is automatically renewed/refetched using TGT. However, when TGT expires, delegation token renewal/refetch will fail and no further HFTP operation is possible. This is unsatisfactory since the user has given us her keytab. We should be able to relogin from keytab and continue.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Assigned: (HDFS-1364) HFTP client should support relogin
from keytab
Posted by "Jitendra Nath Pandey (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HDFS-1364?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jitendra Nath Pandey reassigned HDFS-1364:
------------------------------------------
Assignee: Jitendra Nath Pandey (was: Kan Zhang)
> HFTP client should support relogin from keytab
> ----------------------------------------------
>
> Key: HDFS-1364
> URL: https://issues.apache.org/jira/browse/HDFS-1364
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: security
> Reporter: Kan Zhang
> Assignee: Jitendra Nath Pandey
>
> If a user starts a long-running HFTP client using a keytab, we should do relogin automatically whenever TGT expires. Currently, HFTP client uses TGT to fetch a delegation token and cache that delegation token for HFTP operations. The delegation token is automatically renewed/refetched using TGT. However, when TGT expires, delegation token renewal/refetch will fail and no further HFTP operation is possible. This is unsatisfactory since the user has given us her keytab. We should be able to relogin from keytab and continue.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (HDFS-1364) HFTP client should support relogin
from keytab
Posted by "Hudson (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HDFS-1364?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12918164#action_12918164 ]
Hudson commented on HDFS-1364:
------------------------------
Integrated in Hadoop-Hdfs-trunk-Commit #406 (See [https://hudson.apache.org/hudson/job/Hadoop-Hdfs-trunk-Commit/406/])
> HFTP client should support relogin from keytab
> ----------------------------------------------
>
> Key: HDFS-1364
> URL: https://issues.apache.org/jira/browse/HDFS-1364
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: security
> Reporter: Kan Zhang
> Assignee: Jitendra Nath Pandey
> Fix For: 0.22.0
>
> Attachments: HDFS-1364-y20.1.patch, HDFS-1364-y20.2.patch, HDFS-1364.1.patch, HDFS-1364.2.patch
>
>
> If a user starts a long-running HFTP client using a keytab, we should do relogin automatically whenever TGT expires. Currently, HFTP client uses TGT to fetch a delegation token and cache that delegation token for HFTP operations. The delegation token is automatically renewed/refetched using TGT. However, when TGT expires, delegation token renewal/refetch will fail and no further HFTP operation is possible. This is unsatisfactory since the user has given us her keytab. We should be able to relogin from keytab and continue.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (HDFS-1364) HFTP client should support relogin from
keytab
Posted by "Jitendra Nath Pandey (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HDFS-1364?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jitendra Nath Pandey updated HDFS-1364:
---------------------------------------
Attachment: HDFS-1364-y20.2.patch
> HFTP client should support relogin from keytab
> ----------------------------------------------
>
> Key: HDFS-1364
> URL: https://issues.apache.org/jira/browse/HDFS-1364
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: security
> Reporter: Kan Zhang
> Assignee: Jitendra Nath Pandey
> Attachments: HDFS-1364-y20.1.patch, HDFS-1364-y20.2.patch
>
>
> If a user starts a long-running HFTP client using a keytab, we should do relogin automatically whenever TGT expires. Currently, HFTP client uses TGT to fetch a delegation token and cache that delegation token for HFTP operations. The delegation token is automatically renewed/refetched using TGT. However, when TGT expires, delegation token renewal/refetch will fail and no further HFTP operation is possible. This is unsatisfactory since the user has given us her keytab. We should be able to relogin from keytab and continue.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.