You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@storm.apache.org by "Robert Joseph Evans (JIRA)" <ji...@apache.org> on 2014/06/10 21:29:01 UTC
[jira] [Created] (STORM-346) (Security) Oozie style delegation
tokens for HDFS/HBase
Robert Joseph Evans created STORM-346:
-----------------------------------------
Summary: (Security) Oozie style delegation tokens for HDFS/HBase
Key: STORM-346
URL: https://issues.apache.org/jira/browse/STORM-346
Project: Apache Storm (Incubating)
Issue Type: Bug
Reporter: Robert Joseph Evans
Oozie has the ability to fetch delegation tokens on behalf of other users by running as a super user that can become a proxy user for almost anyone else.
We should build one or more classes similar to AutoTGT that can fetch a delegation token for HDFS/HBase, renew the token if needed, and then once the token is about to permanently expire fetch a new one.
According to some people I have talked with HBase may need to have a JIRA filed against it so that it can pick up a new delegation token without needing to restart the process.
--
This message was sent by Atlassian JIRA
(v6.2#6252)