You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-dev@hadoop.apache.org by "Robert Joseph Evans (JIRA)" <ji...@apache.org> on 2014/07/02 19:47:25 UTC
[jira] [Created] (HADOOP-10776) Open up Delegation token fetching
and renewal to STORM (Possibly others)
Robert Joseph Evans created HADOOP-10776:
--------------------------------------------
Summary: Open up Delegation token fetching and renewal to STORM (Possibly others)
Key: HADOOP-10776
URL: https://issues.apache.org/jira/browse/HADOOP-10776
Project: Hadoop Common
Issue Type: Improvement
Reporter: Robert Joseph Evans
Storm would like to be able to fetch delegation tokens and forward them on to running topologies so that they can access HDFS (STORM-346). But to do so we need to open up access to some of APIs.
Most notably FileSystem.addDelegationTokens(), Token.renew, Credentials.getAllTokens, and UserGroupInformation but there may be others.
At a minimum adding in storm to the list of allowed API users. But ideally making them public. Restricting access to such important functionality to just MR really makes secure HDFS inaccessible to anything except MR, or tools that reuse MR input formats.
--
This message was sent by Atlassian JIRA
(v6.2#6252)