You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by "Xiaoyu Yao (JIRA)" <ji...@apache.org> on 2015/10/01 00:48:04 UTC

[jira] [Created] (HADOOP-12453) Support decoding KMS Delegation Token with its own Identifier

Xiaoyu Yao created HADOOP-12453:
-----------------------------------

             Summary: Support decoding KMS Delegation Token with its own Identifier
                 Key: HADOOP-12453
                 URL: https://issues.apache.org/jira/browse/HADOOP-12453
             Project: Hadoop Common
          Issue Type: Improvement
          Components: kms, security
    Affects Versions: 2.4.0
            Reporter: Xiaoyu Yao
            Assignee: Xiaoyu Yao


kms-dt currently does not have its own token identifier class to decode it properly as shown in the HDFS logs below. This JIRA is opened to add support for that.

{code}
2015-09-30 22:36:14,379|beaver.machine|INFO|5619|140004068153152|MainThread|15/09/30 22:36:14 WARN token.Token: Cannot find class for token kind kms-dt
2015-09-30 22:36:14,380|beaver.machine|INFO|5619|140004068153152|MainThread|15/09/30 22:36:14 INFO security.TokenCache: Got dt for hdfs://tde-hdfs-3.novalocal:8020; Kind: kms-dt, Service: 172.22.64.179:9292, Ident: 00 06 68 72 74 5f 71 61 02 72 6d 00 8a 01 50 20 66 1c a3 8a 01 50 44 72 a0 a3 0f 03
{code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)