You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Sergey Shelukhin (JIRA)" <ji...@apache.org> on 2016/05/02 23:35:13 UTC
[jira] [Created] (HADOOP-13081) add the ability to create multiple
UGIs/subjects from one kerberos login
Sergey Shelukhin created HADOOP-13081:
-----------------------------------------
Summary: add the ability to create multiple UGIs/subjects from one kerberos login
Key: HADOOP-13081
URL: https://issues.apache.org/jira/browse/HADOOP-13081
Project: Hadoop Common
Issue Type: Bug
Reporter: Sergey Shelukhin
We have a scenario where we log in with kerberos as a certain user for some tasks, but also want to add tokens to the resulting UGI that would be specific to each task.
I am not sure how this can be accomplished with the existing UGI interface. Perhaps some clone method would be helpful, similar to createProxyUser minus the proxy stuff; or it could just relogin anew from ticket cache. getUGIFromTicketCache seems like the best option in existing code, but there doesn't appear to be a consistent way of handling ticket cache location - the above method, that I only see called in test, is using a config setting that is not used anywhere else, and the env variable for the location is not set on all paths - trying to find the correct ticket cache and setting it in the config for getUGIFromTicketCache seems even hackier than doing the clone via reflection ;)
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org