You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by "Steve Loughran (JIRA)" <ji...@apache.org> on 2019/01/23 18:30:00 UTC

[jira] [Commented] (HADOOP-16066) S3a DelegationToken bindings to to support a "correlation ID" for the UA header

    [ https://issues.apache.org/jira/browse/HADOOP-16066?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16750297#comment-16750297 ] 

Steve Loughran commented on HADOOP-16066:
-----------------------------------------

proposal: DT binding can provide a getter for UA field; if returned then it is added to the UA value. as the value to some key. Not sure what makes the best key name. "delegation", "tracking", "correlation"?

> S3a DelegationToken bindings to to support a "correlation ID" for the UA header
> -------------------------------------------------------------------------------
>
>                 Key: HADOOP-16066
>                 URL: https://issues.apache.org/jira/browse/HADOOP-16066
>             Project: Hadoop Common
>          Issue Type: Sub-task
>          Components: fs/s3
>            Reporter: Steve Loughran
>            Priority: Minor
>
> to help track down which user is using an assigned role from a DT, allow the DT binding to provide some kind of DT/correlation ID. The binding can then build that up when the token is issued, and then serve it up later
> If this is picked up and added to the UA header, then S3 logs can let you go backwards from requests to the specific DT issues/used, and then even the principal.
> For the standard bindings, we'd return: principal + UUID



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org