You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Alejandro Abdelnur (Created) (JIRA)" <ji...@apache.org> on 2011/12/07 02:32:40 UTC
[jira] [Created] (HADOOP-7887) KerberosAuthenticatorHandler is not
setting KerberosName name rules from configuration
KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
--------------------------------------------------------------------------------------
Key: HADOOP-7887
URL: https://issues.apache.org/jira/browse/HADOOP-7887
Project: Hadoop Common
Issue Type: Bug
Components: security
Affects Versions: 0.24.0, 0.23.1
Reporter: Alejandro Abdelnur
Assignee: Alejandro Abdelnur
Priority: Critical
Fix For: 0.24.0, 0.23.1
While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7887) KerberosAuthenticatorHandler is not
setting KerberosName name rules from configuration
Posted by "Alejandro Abdelnur (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Alejandro Abdelnur updated HADOOP-7887:
---------------------------------------
Status: Patch Available (was: Open)
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13164790#comment-13164790 ]
Hudson commented on HADOOP-7887:
--------------------------------
Integrated in Hadoop-Common-0.23-Commit #256 (See [https://builds.apache.org/job/Hadoop-Common-0.23-Commit/256/])
Merge -r 1211672:1211673 from trunk to branch. FIXES: HADOOP-7887
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1211675
Files :
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/util/KerberosName.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/test/java/org/apache/hadoop/security/authentication/server/TestKerberosAuthenticationHandler.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/HadoopKerberosName.java
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Tsz Wo (Nicholas), SZE (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13166054#comment-13166054 ]
Tsz Wo (Nicholas), SZE commented on HADOOP-7887:
------------------------------------------------
Hi Alejandro, the problem in HDFS-2648 may be caused by the committed patch. Could you take a look?
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13164818#comment-13164818 ]
Hudson commented on HADOOP-7887:
--------------------------------
Integrated in Hadoop-Mapreduce-0.23-Commit #267 (See [https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Commit/267/])
Merge -r 1211672:1211673 from trunk to branch. FIXES: HADOOP-7887
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1211675
Files :
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/util/KerberosName.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/test/java/org/apache/hadoop/security/authentication/server/TestKerberosAuthenticationHandler.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/HadoopKerberosName.java
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Alejandro Abdelnur (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13164065#comment-13164065 ]
Alejandro Abdelnur commented on HADOOP-7887:
--------------------------------------------
As a side comment, I'm not that happy with this fix. The main issue here is that hadoop-auth does not depend on hadoop-common and because of that UGI cannot be initialized from here. A more correct way of fixing this would be to decouple the setRules() from UGI initialization. Or ... if a namerules has been explicitly set, UGI should not override it.
The later approach seems cleaner, thoughts? I could add that to the patch and then the init first UGI caveat would disappear.
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13164780#comment-13164780 ]
Hudson commented on HADOOP-7887:
--------------------------------
Integrated in Hadoop-Hdfs-trunk-Commit #1449 (See [https://builds.apache.org/job/Hadoop-Hdfs-trunk-Commit/1449/])
HADOOP-7887. KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration. (tucu)
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1211673
Files :
* /hadoop/common/trunk/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/util/KerberosName.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-auth/src/test/java/org/apache/hadoop/security/authentication/server/TestKerberosAuthenticationHandler.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/HadoopKerberosName.java
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Hadoop QA (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13164058#comment-13164058 ]
Hadoop QA commented on HADOOP-7887:
-----------------------------------
-1 overall. Here are the results of testing the latest attachment
http://issues.apache.org/jira/secure/attachment/12506372/HADOOP-7887.patch
against trunk revision .
+1 @author. The patch does not contain any @author tags.
+1 tests included. The patch appears to include 3 new or modified tests.
-1 patch. The patch command could not apply the patch.
Console output: https://builds.apache.org/job/PreCommit-HADOOP-Build/440//console
This message is automatically generated.
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13164815#comment-13164815 ]
Hudson commented on HADOOP-7887:
--------------------------------
Integrated in Hadoop-Mapreduce-trunk-Commit #1401 (See [https://builds.apache.org/job/Hadoop-Mapreduce-trunk-Commit/1401/])
HADOOP-7887. KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration. (tucu)
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1211673
Files :
* /hadoop/common/trunk/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/util/KerberosName.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-auth/src/test/java/org/apache/hadoop/security/authentication/server/TestKerberosAuthenticationHandler.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/HadoopKerberosName.java
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13165195#comment-13165195 ]
Hudson commented on HADOOP-7887:
--------------------------------
Integrated in Hadoop-Hdfs-HAbranch-build #9 (See [https://builds.apache.org/job/Hadoop-Hdfs-HAbranch-build/9/])
Merge -r 1211672:1211673 from trunk to branch. FIXES: HADOOP-7887
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1211675
Files :
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/util/KerberosName.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/test/java/org/apache/hadoop/security/authentication/server/TestKerberosAuthenticationHandler.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/HadoopKerberosName.java
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Angelo K. Huang (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13164760#comment-13164760 ]
Angelo K. Huang commented on HADOOP-7887:
-----------------------------------------
The patch works great on Oozie. Thanks a lot for fixing this.
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13165206#comment-13165206 ]
Hudson commented on HADOOP-7887:
--------------------------------
Integrated in Hadoop-Mapreduce-0.23-Build #119 (See [https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Build/119/])
Merge -r 1211672:1211673 from trunk to branch. FIXES: HADOOP-7887
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1211675
Files :
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/util/KerberosName.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/test/java/org/apache/hadoop/security/authentication/server/TestKerberosAuthenticationHandler.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/HadoopKerberosName.java
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13164782#comment-13164782 ]
Hudson commented on HADOOP-7887:
--------------------------------
Integrated in Hadoop-Common-trunk-Commit #1377 (See [https://builds.apache.org/job/Hadoop-Common-trunk-Commit/1377/])
HADOOP-7887. KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration. (tucu)
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1211673
Files :
* /hadoop/common/trunk/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/util/KerberosName.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-auth/src/test/java/org/apache/hadoop/security/authentication/server/TestKerberosAuthenticationHandler.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/HadoopKerberosName.java
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13165199#comment-13165199 ]
Hudson commented on HADOOP-7887:
--------------------------------
Integrated in Hadoop-Hdfs-0.23-Build #101 (See [https://builds.apache.org/job/Hadoop-Hdfs-0.23-Build/101/])
Merge -r 1211672:1211673 from trunk to branch. FIXES: HADOOP-7887
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1211675
Files :
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/util/KerberosName.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/test/java/org/apache/hadoop/security/authentication/server/TestKerberosAuthenticationHandler.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/HadoopKerberosName.java
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7887) KerberosAuthenticatorHandler is not
setting KerberosName name rules from configuration
Posted by "Alejandro Abdelnur (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Alejandro Abdelnur updated HADOOP-7887:
---------------------------------------
Attachment: HADOOP-7887.patch
Updated patch that does not requires UGI initialization in advance.
The UGI initialization will set the name rules only if they have not been already set.
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7887) KerberosAuthenticatorHandler is not
setting KerberosName name rules from configuration
Posted by "Alejandro Abdelnur (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Alejandro Abdelnur updated HADOOP-7887:
---------------------------------------
Fix Version/s: (was: 0.24.0)
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7887) KerberosAuthenticatorHandler is not
setting KerberosName name rules from configuration
Posted by "Alejandro Abdelnur (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Alejandro Abdelnur updated HADOOP-7887:
---------------------------------------
Attachment: HADOOP-7887.patch
The attached patch configures the name rules as part of the configuration of the KerberosAuthenticatorHandler.
Verified Kerberos testcases pass and added a new test to test this setting happens.
The UGI on initialization (first call to *isSecurityEnabled()* ) reads the name rules for Hadoop configuration files (-site.xml). It is not possible to se a different name rule directly.
So, the trick is, if using hadoop-auth outside of Hadoop (ie by Oozie) set the name rules in the hadoop-auth configuration properties and call UGI.isSecurityEnabled() before the KerberosAuthenticationHandler is initialized. If using it from Hadoop no need to set it in the hadoop-auth configuration, it will use the one set by UGI
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13165266#comment-13165266 ]
Hudson commented on HADOOP-7887:
--------------------------------
Integrated in Hadoop-Hdfs-trunk #888 (See [https://builds.apache.org/job/Hadoop-Hdfs-trunk/888/])
HADOOP-7887. KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration. (tucu)
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1211673
Files :
* /hadoop/common/trunk/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/util/KerberosName.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-auth/src/test/java/org/apache/hadoop/security/authentication/server/TestKerberosAuthenticationHandler.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/HadoopKerberosName.java
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Hadoop QA (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13164179#comment-13164179 ]
Hadoop QA commented on HADOOP-7887:
-----------------------------------
-1 overall. Here are the results of testing the latest attachment
http://issues.apache.org/jira/secure/attachment/12506402/HADOOP-7887.patch
against trunk revision .
+1 @author. The patch does not contain any @author tags.
+1 tests included. The patch appears to include 3 new or modified tests.
-1 javadoc. The javadoc tool appears to have generated 9 warning messages.
+1 javac. The applied patch does not increase the total number of javac compiler warnings.
+1 findbugs. The patch does not introduce any new Findbugs (version 1.3.9) warnings.
+1 release audit. The applied patch does not increase the total number of release audit warnings.
+1 core tests. The patch passed unit tests in .
+1 contrib tests. The patch passed contrib unit tests.
Test results: https://builds.apache.org/job/PreCommit-HADOOP-Build/442//testReport/
Console output: https://builds.apache.org/job/PreCommit-HADOOP-Build/442//console
This message is automatically generated.
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13164786#comment-13164786 ]
Hudson commented on HADOOP-7887:
--------------------------------
Integrated in Hadoop-Hdfs-0.23-Commit #246 (See [https://builds.apache.org/job/Hadoop-Hdfs-0.23-Commit/246/])
Merge -r 1211672:1211673 from trunk to branch. FIXES: HADOOP-7887
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1211675
Files :
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/util/KerberosName.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-auth/src/test/java/org/apache/hadoop/security/authentication/server/TestKerberosAuthenticationHandler.java
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/HadoopKerberosName.java
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Aaron T. Myers (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13164756#comment-13164756 ]
Aaron T. Myers commented on HADOOP-7887:
----------------------------------------
+1, the latest patch looks good to me. I like this solution *a lot* better than the original.
Thanks a lot for fixing this issue, Alejandro.
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7887) KerberosAuthenticatorHandler is
not setting KerberosName name rules from configuration
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13165253#comment-13165253 ]
Hudson commented on HADOOP-7887:
--------------------------------
Integrated in Hadoop-Mapreduce-trunk #921 (See [https://builds.apache.org/job/Hadoop-Mapreduce-trunk/921/])
HADOOP-7887. KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration. (tucu)
tucu : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1211673
Files :
* /hadoop/common/trunk/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/server/KerberosAuthenticationHandler.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/util/KerberosName.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-auth/src/test/java/org/apache/hadoop/security/authentication/server/TestKerberosAuthenticationHandler.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/HadoopKerberosName.java
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7887) KerberosAuthenticatorHandler is not
setting KerberosName name rules from configuration
Posted by "Alejandro Abdelnur (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7887?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Alejandro Abdelnur updated HADOOP-7887:
---------------------------------------
Resolution: Fixed
Hadoop Flags: Reviewed
Status: Resolved (was: Patch Available)
Committed to trunk and branch-0.23
> KerberosAuthenticatorHandler is not setting KerberosName name rules from configuration
> --------------------------------------------------------------------------------------
>
> Key: HADOOP-7887
> URL: https://issues.apache.org/jira/browse/HADOOP-7887
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.24.0, 0.23.1
> Reporter: Alejandro Abdelnur
> Assignee: Alejandro Abdelnur
> Priority: Critical
> Fix For: 0.24.0, 0.23.1
>
> Attachments: HADOOP-7887.patch, HADOOP-7887.patch
>
>
> While the KerberosAuthenticatorHandler defines the name rules property, it does not set it in KerberosName.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira