You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by "Xiaoyu Yao (JIRA)" <ji...@apache.org> on 2016/02/09 21:01:18 UTC

[jira] [Created] (HADOOP-12787) KMS SPNEGO sequence does not work with WEBHDFS

Xiaoyu Yao created HADOOP-12787:
-----------------------------------

             Summary: KMS SPNEGO sequence does not work with WEBHDFS
                 Key: HADOOP-12787
                 URL: https://issues.apache.org/jira/browse/HADOOP-12787
             Project: Hadoop Common
          Issue Type: Bug
            Reporter: Xiaoyu Yao
            Assignee: Xiaoyu Yao


This was a follow up of my [comments|https://issues.apache.org/jira/browse/HADOOP-12559?focusedCommentId=15059045&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15059045] for HADOOP-10698.

It blocks a delegation token based user (MR) using WEBHDFS to access KMS server for encrypted files. This might work in many cases before as JDK 7 has been aggressively do SPENGO implicitly. However, this is not the case in JDK 8 as we have seen many failures when using WEBHDFS with KMS and HDFS encryption zone.

 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)