You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Owen O'Malley (JIRA)" <ji...@apache.org> on 2012/05/01 18:21:49 UTC
[jira] [Created] (HADOOP-8338) Can't renew or cancel HDFS
delegation tokens over secure RPC
Owen O'Malley created HADOOP-8338:
-------------------------------------
Summary: Can't renew or cancel HDFS delegation tokens over secure RPC
Key: HADOOP-8338
URL: https://issues.apache.org/jira/browse/HADOOP-8338
Project: Hadoop Common
Issue Type: Bug
Components: security
Reporter: Owen O'Malley
Assignee: Owen O'Malley
The fetchdt tool is failing for secure deployments when given --renew or --cancel on tokens fetched using RPC. (The tokens fetched over HTTP can be renewed and canceled fine.)
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8338) Can't renew or cancel HDFS
delegation tokens over secure RPC
Posted by "Tsz Wo (Nicholas), SZE (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8338?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13266055#comment-13266055 ]
Tsz Wo (Nicholas), SZE commented on HADOOP-8338:
------------------------------------------------
Oops, I missed that the patch is for 1.x. Why HdfsConfiguration is mistake?
+1 on the 1.x patch.
> Can't renew or cancel HDFS delegation tokens over secure RPC
> ------------------------------------------------------------
>
> Key: HADOOP-8338
> URL: https://issues.apache.org/jira/browse/HADOOP-8338
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Reporter: Owen O'Malley
> Assignee: Owen O'Malley
> Attachments: hadoop-8338.patch
>
>
> The fetchdt tool is failing for secure deployments when given --renew or --cancel on tokens fetched using RPC. (The tokens fetched over HTTP can be renewed and canceled fine.)
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-8338) Can't renew or cancel HDFS
delegation tokens over secure RPC
Posted by "Matt Foley (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8338?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Matt Foley updated HADOOP-8338:
-------------------------------
Fix Version/s: (was: 1.1.0)
1.0.3 was an ancestor of 1.1.0.
> Can't renew or cancel HDFS delegation tokens over secure RPC
> ------------------------------------------------------------
>
> Key: HADOOP-8338
> URL: https://issues.apache.org/jira/browse/HADOOP-8338
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Reporter: Owen O'Malley
> Assignee: Owen O'Malley
> Fix For: 1.0.3
>
> Attachments: hadoop-8338.patch
>
>
> The fetchdt tool is failing for secure deployments when given --renew or --cancel on tokens fetched using RPC. (The tokens fetched over HTTP can be renewed and canceled fine.)
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-8338) Can't renew or cancel HDFS
delegation tokens over secure RPC
Posted by "Owen O'Malley (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8338?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Owen O'Malley updated HADOOP-8338:
----------------------------------
Attachment: hadoop-8338.patch
The problem is that fetchdt doesn't include the hdfs-site.xml and therefore doesn't get the value of dfs.namenode.kerberos.principal.
> Can't renew or cancel HDFS delegation tokens over secure RPC
> ------------------------------------------------------------
>
> Key: HADOOP-8338
> URL: https://issues.apache.org/jira/browse/HADOOP-8338
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Reporter: Owen O'Malley
> Assignee: Owen O'Malley
> Attachments: hadoop-8338.patch
>
>
> The fetchdt tool is failing for secure deployments when given --renew or --cancel on tokens fetched using RPC. (The tokens fetched over HTTP can be renewed and canceled fine.)
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-8338) Can't renew or cancel HDFS
delegation tokens over secure RPC
Posted by "Owen O'Malley (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8338?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Owen O'Malley updated HADOOP-8338:
----------------------------------
Target Version/s: 1.0.3
> Can't renew or cancel HDFS delegation tokens over secure RPC
> ------------------------------------------------------------
>
> Key: HADOOP-8338
> URL: https://issues.apache.org/jira/browse/HADOOP-8338
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Reporter: Owen O'Malley
> Assignee: Owen O'Malley
>
> The fetchdt tool is failing for secure deployments when given --renew or --cancel on tokens fetched using RPC. (The tokens fetched over HTTP can be renewed and canceled fine.)
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (HADOOP-8338) Can't renew or cancel HDFS
delegation tokens over secure RPC
Posted by "Owen O'Malley (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8338?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Owen O'Malley resolved HADOOP-8338.
-----------------------------------
Resolution: Fixed
Fix Version/s: 1.1.0
1.0.3
Hadoop Flags: Reviewed
I committed this to branch-1.0 and branch-1. Trunk was already referencing HdfsConfiguration in DelegationTokenFetcher, so the problem won't happen.
> Can't renew or cancel HDFS delegation tokens over secure RPC
> ------------------------------------------------------------
>
> Key: HADOOP-8338
> URL: https://issues.apache.org/jira/browse/HADOOP-8338
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Reporter: Owen O'Malley
> Assignee: Owen O'Malley
> Fix For: 1.0.3, 1.1.0
>
> Attachments: hadoop-8338.patch
>
>
> The fetchdt tool is failing for secure deployments when given --renew or --cancel on tokens fetched using RPC. (The tokens fetched over HTTP can be renewed and canceled fine.)
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8338) Can't renew or cancel HDFS
delegation tokens over secure RPC
Posted by "Tsz Wo (Nicholas), SZE (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8338?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13265954#comment-13265954 ]
Tsz Wo (Nicholas), SZE commented on HADOOP-8338:
------------------------------------------------
Hi Owen, we should call HdfsConfiguration.init() instead.
> Can't renew or cancel HDFS delegation tokens over secure RPC
> ------------------------------------------------------------
>
> Key: HADOOP-8338
> URL: https://issues.apache.org/jira/browse/HADOOP-8338
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Reporter: Owen O'Malley
> Assignee: Owen O'Malley
> Attachments: hadoop-8338.patch
>
>
> The fetchdt tool is failing for secure deployments when given --renew or --cancel on tokens fetched using RPC. (The tokens fetched over HTTP can be renewed and canceled fine.)
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Comment Edited] (HADOOP-8338) Can't renew or cancel HDFS
delegation tokens over secure RPC
Posted by "Matt Foley (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8338?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13440815#comment-13440815 ]
Matt Foley edited comment on HADOOP-8338 at 8/24/12 11:16 AM:
--------------------------------------------------------------
1.0.3 was a lineal predecessor of 1.1.0.
was (Author: mattf):
1.0.3 was an ancestor of 1.1.0.
> Can't renew or cancel HDFS delegation tokens over secure RPC
> ------------------------------------------------------------
>
> Key: HADOOP-8338
> URL: https://issues.apache.org/jira/browse/HADOOP-8338
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Reporter: Owen O'Malley
> Assignee: Owen O'Malley
> Fix For: 1.0.3
>
> Attachments: hadoop-8338.patch
>
>
> The fetchdt tool is failing for secure deployments when given --renew or --cancel on tokens fetched using RPC. (The tokens fetched over HTTP can be renewed and canceled fine.)
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8338) Can't renew or cancel HDFS
delegation tokens over secure RPC
Posted by "Owen O'Malley (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8338?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13266037#comment-13266037 ]
Owen O'Malley commented on HADOOP-8338:
---------------------------------------
Nicholas,
I tend to think that HdfsConfiguration is a mistake, but it doesn't even exist in 1.x. I guess the trunk version of the patch should use it.
> Can't renew or cancel HDFS delegation tokens over secure RPC
> ------------------------------------------------------------
>
> Key: HADOOP-8338
> URL: https://issues.apache.org/jira/browse/HADOOP-8338
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Reporter: Owen O'Malley
> Assignee: Owen O'Malley
> Attachments: hadoop-8338.patch
>
>
> The fetchdt tool is failing for secure deployments when given --renew or --cancel on tokens fetched using RPC. (The tokens fetched over HTTP can be renewed and canceled fine.)
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira