You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-dev@hadoop.apache.org by "Kai Zheng (JIRA)" <ji...@apache.org> on 2013/09/03 07:28:51 UTC

[jira] [Created] (HADOOP-9926) Authentication specific login implementation in separate class from UGI

Kai Zheng created HADOOP-9926:
---------------------------------

             Summary: Authentication specific login implementation in separate class from UGI
                 Key: HADOOP-9926
                 URL: https://issues.apache.org/jira/browse/HADOOP-9926
             Project: Hadoop Common
          Issue Type: Improvement
            Reporter: Kai Zheng
            Assignee: Kai Zheng


As discussed in HADOOP-9797, we would improve UGI class in incremental patches. This issue covers the following in the patch that will be attached for this issue:
 
* HadoopLogin is an interface, and AbstractHadoopLogin is the abstract implementation for it, to define the API and common implementation for various login mechanisms, not just for JAAS based. 
* Login implementation details, are removed from UGI and wrapped in concrete HadoopLogin implementations like SimpleAuthnLogin, UserKerberosLogin and KeytabKerberosLogin, which will be simply employed by appropriate UGI login related methods to do the login work. 
* The login result can be returned via getSubject() for now from the HadoopLogin interface, and UGI can call it to get the result. The result is then wrapped in a UGI object.
* For Kerberos part, we might cover it in another JIRA since the change is big.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira