You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "ramtin (JIRA)" <ji...@apache.org> on 2017/02/10 01:42:41 UTC

[jira] [Comment Edited] (HADOOP-14063) Hadoop CredentialProvider fails to load list of keystore files

    [ https://issues.apache.org/jira/browse/HADOOP-14063?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15860491#comment-15860491 ] 

ramtin edited comment on HADOOP-14063 at 2/10/17 1:42 AM:
----------------------------------------------------------

[~lmccay] Thank you for your comment.
I agree with you. Provided a new patch to separately log path and permission issues.


was (Author: ramtinb):
[~lmccay] Thank you for your comment.
I agree with you. Provided a new patch to separately log path and permission issue.

> Hadoop CredentialProvider fails to load list of keystore files
> --------------------------------------------------------------
>
>                 Key: HADOOP-14063
>                 URL: https://issues.apache.org/jira/browse/HADOOP-14063
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>            Reporter: ramtin
>            Assignee: ramtin
>         Attachments: HADOOP-14063-001.patch, HADOOP-14063-002.patch
>
>
> The {{hadoop.security.credential.provider.path}} property can be a list of keystore files like this:
> _jceks://hdfs/file1.jceks,jceks://hdfs/file2.jceks,jceks://hdfs/file3.jceks ..._
> Each file can have different permissions set to limit the users that have access to the keys.  Some users may not have access to all the keystore files.
> Each keystore file in the list should be tried until one is found with the key needed. 
> Currently it will throw an exception if one of the keystore files cannot be loaded instead of continuing to try the next one in the list.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org