You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by "Zhijie Shen (JIRA)" <ji...@apache.org> on 2014/10/15 23:59:33 UTC

[jira] [Updated] (HADOOP-11207) DelegationTokenAuthenticationHandler needs to support DT operations for proxy user

     [ https://issues.apache.org/jira/browse/HADOOP-11207?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Zhijie Shen updated HADOOP-11207:
---------------------------------
    Attachment: HADOOP-11207.1.patch

Create a patch to make the dt auth handler to support proxy user.

> DelegationTokenAuthenticationHandler needs to support DT operations for proxy user
> ----------------------------------------------------------------------------------
>
>                 Key: HADOOP-11207
>                 URL: https://issues.apache.org/jira/browse/HADOOP-11207
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>            Reporter: Zhijie Shen
>            Assignee: Zhijie Shen
>         Attachments: HADOOP-11207.1.patch
>
>
> Currently, DelegationTokenAuthenticationHandler only support DT operations for the request user after it passes the authentication. However, it should also support the request user to do DT operations on behalf of the proxy user.
> Timeline server is using the authentication filter for DT operations instead of traditional RPC-based ones. It needs this feature to enable the proxy user to use the timeline service (YARN-2676).



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)