You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Da Zhou (JIRA)" <ji...@apache.org> on 2018/10/10 19:51:00 UTC

[jira] [Comment Edited] (HADOOP-15823) ABFS: Stop requiring client ID and tenant ID for MSI

    [ https://issues.apache.org/jira/browse/HADOOP-15823?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16645468#comment-16645468 ] 

Da Zhou edited comment on HADOOP-15823 at 10/10/18 7:50 PM:
------------------------------------------------------------

Sorry for this late reply.
 As [~tmarquardt] mentioned, the current MSI token implementation in ABFS is not exactly the same as the [documentation|https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/how-to-use-vm-token#get-a-token-using-http].
 I've updated the implementation and removed unnecessary query parameters by following the official documentation. [~mackrorysd] could you try this patch at your end?


was (Author: danielzhou):
Sorry for this late reply.
As Thomas mentioned, the current MSI  token implementation in ABFS  is not exactly the same as the [documentation|https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/how-to-use-vm-token#get-a-token-using-http].
I've updated the implementation and removed unnecessary query parameters by following the official documentation. [~mackrorysd] could you try this patch at your end?

> ABFS: Stop requiring client ID and tenant ID for MSI
> ----------------------------------------------------
>
>                 Key: HADOOP-15823
>                 URL: https://issues.apache.org/jira/browse/HADOOP-15823
>             Project: Hadoop Common
>          Issue Type: Sub-task
>    Affects Versions: 3.2.0
>            Reporter: Sean Mackrory
>            Assignee: Da Zhou
>            Priority: Major
>         Attachments: HADOOP-15823-001.patch
>
>
> ABFS requires the user to configure the tenant ID and client ID. From my understanding of MSI, that shouldn't be necessary and is an added requirement compared to MSI in ADLS. Can that be dropped?



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org