[jira] [Commented] (HDFS-3553) Hftp proxy tokens are broken

["Daryn Sharp (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HDFS-3553?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13405915#comment-13405915 ] 

Daryn Sharp commented on HDFS-3553:
-----------------------------------

Also of note, the patch makes the example code for Secure_Impersonation work under hftp.  I'm working on patches for the newer branches since the code has changed under spnego auth.  The problem appears to be there, but I haven't set up a spnego cluster to verify.  In the meantime, the patch really needs to go into 1.x.

Currently w/o the patch, oozie on 1.x cannot use hftp to any 1.x/2.x+ cluster.  Hftp on 1.x+ works with 20x only if the proxy token is acquired over hdfs.  This defeats the primary purpose of using hftp (immunity from rpc version mismatches).  Webhdfs may be similarly affected although that should be fixed under another jira if proven to be true.
                
> Hftp proxy tokens are broken
> ----------------------------
>
>                 Key: HDFS-3553
>                 URL: https://issues.apache.org/jira/browse/HDFS-3553
>             Project: Hadoop HDFS
>          Issue Type: Bug
>    Affects Versions: 1.0.2, 2.0.0-alpha, 3.0.0
>            Reporter: Daryn Sharp
>            Assignee: Daryn Sharp
>            Priority: Blocker
>         Attachments: HDFS-3553-1.branch-1.0.patch, HDFS-3553.branch-1.0.patch
>
>
> Proxy tokens are broken for hftp.  The impact is systems using proxy tokens, such as oozie jobs, cannot use hftp.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira