You are viewing a plain text version of this content. The canonical link for it is here.
Posted to hdfs-issues@hadoop.apache.org by "Steve Loughran (JIRA)" <ji...@apache.org> on 2018/10/02 18:29:00 UTC
[jira] [Updated] (HDFS-13951) HDFS DelegationTokenFetcher can't
print non-HDFS tokens in a tokenfile
[ https://issues.apache.org/jira/browse/HDFS-13951?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Steve Loughran updated HDFS-13951:
----------------------------------
Attachment: HDFS-13951-001.patch
> HDFS DelegationTokenFetcher can't print non-HDFS tokens in a tokenfile
> ----------------------------------------------------------------------
>
> Key: HDFS-13951
> URL: https://issues.apache.org/jira/browse/HDFS-13951
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: tools
> Affects Versions: 3.2.0
> Reporter: Steve Loughran
> Assignee: Steve Loughran
> Priority: Minor
> Attachments: HDFS-13951-001.patch
>
>
> the fetchdt command can fetch tokens for filesystems other than hdfs (s3a, abfs, etc), but it can't print them, as it assumes all tokens in the file are subclasses of {{org.apache.hadoop.hdfs.security.token.delegation.DelegationTokenIdentifier}} & uses this fact in its decoding. It deserializes the token byte array without checking kind and so ends up with invalid data.
> Fix: ask the tokens to decode themselves; only call toStableString() if an HDFS token.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org