You are viewing a plain text version of this content. The canonical link for it is here.

Posted to hdfs-dev@hadoop.apache.org by "Chris Nauroth (JIRA)" <ji...@apache.org> on 2014/07/11 01:23:04 UTC

[jira] [Created] (HDFS-6666) Abort NameNode and DataNode startup if security is enabled but block access token is not enabled.

Chris Nauroth created HDFS-6666:
-----------------------------------

             Summary: Abort NameNode and DataNode startup if security is enabled but block access token is not enabled.
                 Key: HDFS-6666
                 URL: https://issues.apache.org/jira/browse/HDFS-6666
             Project: Hadoop HDFS
          Issue Type: Bug
          Components: datanode, namenode
    Affects Versions: 3.0.0, 2.5.0
            Reporter: Chris Nauroth
            Priority: Minor


Currently, if security is enabled by setting hadoop.security.authentication to kerberos, but HDFS block access tokens are disabled by setting dfs.block.access.token.enable to false (which is the default), then the NameNode logs an error and proceeds, and the DataNode proceeds without even logging an error.  This jira proposes that this it's invalid to turn on security but not turn on block access tokens, and that it would be better to fail fast and abort the daemons during startup if this happens.



--
This message was sent by Atlassian JIRA
(v6.2#6252)