You are viewing a plain text version of this content. The canonical link for it is here.
Posted to mapreduce-issues@hadoop.apache.org by "Devaraj Das (JIRA)" <ji...@apache.org> on 2010/02/04 21:51:29 UTC

[jira] Created: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

For secure job execution, couple of more UserGroupInformation.doAs needs to be added
------------------------------------------------------------------------------------

                 Key: MAPREDUCE-1457
                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
             Project: Hadoop Map/Reduce
          Issue Type: Bug
    Affects Versions: 0.22.0
            Reporter: Devaraj Das
            Assignee: Devaraj Das
             Fix For: 0.22.0


During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Hudson (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12830708#action_12830708 ] 

Hudson commented on MAPREDUCE-1457:
-----------------------------------

Integrated in Hadoop-Mapreduce-trunk-Commit #228 (See [http://hudson.zones.apache.org/hudson/job/Hadoop-Mapreduce-trunk-Commit/228/])
    . Fixes JobTracker to get the FileSystem object within getStagingAreaDir within a privileged block. Fixes Child.java to use the  appropriate UGIs while getting the TaskUmbilicalProtocol proxy and while executing the task. Contributed by Jakob Homan.


> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457-BPY20.patch.1, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Jakob Homan (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jakob Homan updated MAPREDUCE-1457:
-----------------------------------

    Attachment: MAPREDUCE-1457.patch

Attaching patch for Apache trunk.

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Jakob Homan (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jakob Homan updated MAPREDUCE-1457:
-----------------------------------

    Status: Patch Available  (was: Open)

Submitting patch.  

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Devaraj Das (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12830570#action_12830570 ] 

Devaraj Das commented on MAPREDUCE-1457:
----------------------------------------

+1

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Devaraj Das (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Devaraj Das updated MAPREDUCE-1457:
-----------------------------------

    Attachment: MAPREDUCE-1457-BPY20.patch.1

Patch for Y20. Not to be committed here.

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457-BPY20.patch.1, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Vinod K V (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12830625#action_12830625 ] 

Vinod K V commented on MAPREDUCE-1457:
--------------------------------------

Can you please explain the individual changes for the sake for records? Couldn't see what this issue is addressing without looking at the patch itself. Thanks!

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Jakob Homan (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jakob Homan updated MAPREDUCE-1457:
-----------------------------------

    Status: Open  (was: Patch Available)

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Vinod K V (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vinod K V updated MAPREDUCE-1457:
---------------------------------

    Issue Type: Sub-task  (was: Bug)
        Parent: MAPREDUCE-563

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Devaraj Das (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12830617#action_12830617 ] 

Devaraj Das commented on MAPREDUCE-1457:
----------------------------------------

+1 (also ran tests/test-patch manually). I will commit this.

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Assigned: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Jakob Homan (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jakob Homan reassigned MAPREDUCE-1457:
--------------------------------------

    Assignee: Jakob Homan  (was: Devaraj Das)

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Bug
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Jakob Homan (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jakob Homan updated MAPREDUCE-1457:
-----------------------------------

    Attachment: MAPREDUCE-1457-BPY20.patch

Updated Y! 20 patch, per Devaraj's comments.

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Devaraj Das (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12830619#action_12830619 ] 

Devaraj Das commented on MAPREDUCE-1457:
----------------------------------------

Regarding addition of new tests, the bugs fixed by the patch shows up in only the secure environment (and hence difficult to write testcases). The patch was manually tested.

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Devaraj Das (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12830670#action_12830670 ] 

Devaraj Das commented on MAPREDUCE-1457:
----------------------------------------

Ok the individual changes:
1) In the JobTracker, the getStagingArea RPC needs to construct a path for the user to write job files to. The getStagingArea does a getFileSystem and internally the getFileSystem sets up a connection to the namenode. For this connection, the JobTracker's credential should be used. That's why the mrOwner.doAs in that method is required.
2) In Child.java, the task authenticates to the TaskTracker using the jobtoken. The username in the jobtoken is jobId. The doAs block done using taskOwner is required so that the username mentioned in the token and the one doing the operation matches.
3) In Child.java, the task execution and the task cleanup are within doAs blocks and those doAs blocks are run as the user submitting the job. In the former part, the task communicates with the namenode, and in the latter, it could potentially communicate with the namenode (abortTask creates a connection to the namenode, etc). These are within doAs blocks so that the username mentioned in the delegation token (the job submitting user) matches with the user performing the operation.

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Jakob Homan (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jakob Homan updated MAPREDUCE-1457:
-----------------------------------

    Attachment: MAPREDUCE-1457.patch

String for user should be out of doAs block...

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Devaraj Das (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12830535#action_12830535 ] 

Devaraj Das commented on MAPREDUCE-1457:
----------------------------------------

Some comments:
In the trunk patch and in the Y20 patch, the call to task.taskCleanup in Child.java should be within a privileged block.
In the Y20 patch, the calls to JobHistory.initDone() and JobHistory.init() should be within privileged blocks, and use the JobTracker's ugi. Within JobHistory.logSubmitted, there is a call to set up the writer for userLogFile. That should be within a privileged block and use the user's ugi.

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Devaraj Das (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Devaraj Das updated MAPREDUCE-1457:
-----------------------------------

      Resolution: Fixed
    Hadoop Flags: [Reviewed]
          Status: Resolved  (was: Patch Available)

I just committed this. Thanks, Jakob!

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Jakob Homan (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jakob Homan updated MAPREDUCE-1457:
-----------------------------------

    Status: Patch Available  (was: Open)

Submitting patch.

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Jakob Homan (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jakob Homan updated MAPREDUCE-1457:
-----------------------------------

    Attachment: MAPREDUCE-1457-BPY20.patch

Attaching patch for Y!'s 20 distribution.

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (MAPREDUCE-1457) For secure job execution, couple of more UserGroupInformation.doAs needs to be added

Posted by "Jakob Homan (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/MAPREDUCE-1457?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jakob Homan updated MAPREDUCE-1457:
-----------------------------------

    Attachment: MAPREDUCE-1457.patch

Updated trunk patch.  Removes a couple unneeded variables.

> For secure job execution, couple of more UserGroupInformation.doAs needs to be added
> ------------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1457
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1457
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>    Affects Versions: 0.22.0
>            Reporter: Devaraj Das
>            Assignee: Jakob Homan
>             Fix For: 0.22.0
>
>         Attachments: MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457-BPY20.patch, MAPREDUCE-1457.patch, MAPREDUCE-1457.patch
>
>
> During our testing in a kerberos environment, we had to add UserGroupInformation.doAs blocks in certain places.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.