You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Steve Loughran (JIRA)" <ji...@apache.org> on 2016/03/03 15:37:18 UTC
[jira] [Commented] (HADOOP-12787) KMS SPNEGO sequence does not work
with WEBHDFS
[ https://issues.apache.org/jira/browse/HADOOP-12787?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15177882#comment-15177882 ]
Steve Loughran commented on HADOOP-12787:
-----------------------------------------
Note that there was a typo in the commit; for anyone looking for this patch in {{git log}, grep for HADOOP-12878.
> KMS SPNEGO sequence does not work with WEBHDFS
> ----------------------------------------------
>
> Key: HADOOP-12787
> URL: https://issues.apache.org/jira/browse/HADOOP-12787
> Project: Hadoop Common
> Issue Type: Bug
> Components: kms, security
> Affects Versions: 2.6.3
> Reporter: Xiaoyu Yao
> Assignee: Xiaoyu Yao
> Fix For: 2.8.0
>
> Attachments: HADOOP-12878.00.patch, HADOOP-12878.01.patch, HADOOP-12878.02.patch, HADOOP-12878.03.patch
>
>
> This was a follow up of my [comments|https://issues.apache.org/jira/browse/HADOOP-12559?focusedCommentId=15059045&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15059045] for HADOOP-10698.
> It blocks a delegation token based user (MR) using WEBHDFS to access KMS server for encrypted files. This might work in many cases before as JDK 7 has been aggressively do SPENGO implicitly. However, this is not the case in JDK 8 as we have seen many failures when using WEBHDFS with KMS and HDFS encryption zone.
>
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)