You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Junping Du (JIRA)" <ji...@apache.org> on 2017/01/04 21:54:58 UTC
[jira] [Commented] (HADOOP-12787) KMS SPNEGO sequence does not work
with WEBHDFS
[ https://issues.apache.org/jira/browse/HADOOP-12787?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15799465#comment-15799465 ]
Junping Du commented on HADOOP-12787:
-------------------------------------
Sounds like we are making a wrong JIRA number in commit. Make a note here:
{noformat}
commit 595342154470a4bc98b87c76d1f60ba352338ff5
Author: Xiaoyu Yao <xy...@apache.org>
Date: Wed Feb 17 08:27:27 2016 -0800
HADOOP-12878. KMS SPNEGO sequence does not work with WEBHDFS. Contributed by Xiaoyu Yao.
(cherry picked from commit fd1befb6ba450e45b1fcb3fb28b0da6c48daf6b3)
{noformat}
> KMS SPNEGO sequence does not work with WEBHDFS
> ----------------------------------------------
>
> Key: HADOOP-12787
> URL: https://issues.apache.org/jira/browse/HADOOP-12787
> Project: Hadoop Common
> Issue Type: Bug
> Components: kms, security
> Affects Versions: 2.6.3
> Reporter: Xiaoyu Yao
> Assignee: Xiaoyu Yao
> Fix For: 2.8.0, 3.0.0-alpha1
>
> Attachments: HADOOP-12878.00.patch, HADOOP-12878.01.patch, HADOOP-12878.02.patch, HADOOP-12878.03.patch
>
>
> This was a follow up of my [comments|https://issues.apache.org/jira/browse/HADOOP-12559?focusedCommentId=15059045&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15059045] for HADOOP-10698.
> It blocks a delegation token based user (MR) using WEBHDFS to access KMS server for encrypted files. This might work in many cases before as JDK 7 has been aggressively do SPENGO implicitly. However, this is not the case in JDK 8 as we have seen many failures when using WEBHDFS with KMS and HDFS encryption zone.
>
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org