You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Andrew Purtell (Created) (JIRA)" <ji...@apache.org> on 2011/12/16 01:25:30 UTC
[jira] [Created] (HADOOP-7929) Port HADOOP-7070 to branch-1
Port HADOOP-7070 to branch-1
----------------------------
Key: HADOOP-7929
URL: https://issues.apache.org/jira/browse/HADOOP-7929
Project: Hadoop Common
Issue Type: Bug
Reporter: Andrew Purtell
Without HADOOP-7070, it is impossible to use secured Hadoop inside an application that relies on other JAAS configurations. This is the case for at least a secure HBase which currently needs an external JAAS configuration for secure ZooKeeper access concurrent with secure access to HDFS.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7929) Port HADOOP-7070 to branch-1
Posted by "Andrew Purtell (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7929?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Andrew Purtell updated HADOOP-7929:
-----------------------------------
Attachment: (was: HADOOP-7929.patch)
> Port HADOOP-7070 to branch-1
> ----------------------------
>
> Key: HADOOP-7929
> URL: https://issues.apache.org/jira/browse/HADOOP-7929
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 1.0.0, 1.1.0
> Reporter: Andrew Purtell
>
> Without HADOOP-7070, it is impossible to use secured Hadoop inside an application that relies on other JAAS configurations. This is the case for at least a secure HBase which currently needs an external JAAS configuration for secure ZooKeeper access concurrent with secure access to HDFS.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7929) Port HADOOP-7070 to branch-1
Posted by "Andrew Purtell (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7929?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Andrew Purtell updated HADOOP-7929:
-----------------------------------
Component/s: security
Affects Version/s: 1.1.0
1.0.0
Issue Type: Improvement (was: Bug)
Summary: Port HADOOP-7070 to branch-1 (was: Confirm branch-1 allows external JAAS configurations)
Delegation to parent missing in branch-1.
> Port HADOOP-7070 to branch-1
> ----------------------------
>
> Key: HADOOP-7929
> URL: https://issues.apache.org/jira/browse/HADOOP-7929
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 1.0.0, 1.1.0
> Reporter: Andrew Purtell
>
> Without HADOOP-7070, it is impossible to use secured Hadoop inside an application that relies on other JAAS configurations. This is the case for at least a secure HBase which currently needs an external JAAS configuration for secure ZooKeeper access concurrent with secure access to HDFS.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7929) Port HADOOP-7070 to branch-1
Posted by "Andrew Purtell (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7929?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13170851#comment-13170851 ]
Andrew Purtell commented on HADOOP-7929:
----------------------------------------
@Jitendra: Yes I noticed that change, maybe this is unnecessary. I have not marked the issue as 'Patch Available' as I have tests running and need to manually deploy a test environment tomorrow that pulls together the latest RCs from respective projects. Will post more info per your request or resolve as invalid depending on outcome.
> Port HADOOP-7070 to branch-1
> ----------------------------
>
> Key: HADOOP-7929
> URL: https://issues.apache.org/jira/browse/HADOOP-7929
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 1.0.0, 1.1.0
> Reporter: Andrew Purtell
> Assignee: Andrew Purtell
> Attachments: HADOOP-7929-branch-1.patch
>
>
> Without HADOOP-7070, it is impossible to use secured Hadoop inside an application that relies on other JAAS configurations. This is the case for at least a secure HBase which currently needs an external JAAS configuration for secure ZooKeeper access concurrent with secure access to HDFS.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7929) Port HADOOP-7070 to branch-1
Posted by "Andrew Purtell (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7929?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Andrew Purtell updated HADOOP-7929:
-----------------------------------
Attachment: HADOOP-7929-branch-1.patch
> Port HADOOP-7070 to branch-1
> ----------------------------
>
> Key: HADOOP-7929
> URL: https://issues.apache.org/jira/browse/HADOOP-7929
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 1.0.0, 1.1.0
> Reporter: Andrew Purtell
> Attachments: HADOOP-7929-branch-1.patch
>
>
> Without HADOOP-7070, it is impossible to use secured Hadoop inside an application that relies on other JAAS configurations. This is the case for at least a secure HBase which currently needs an external JAAS configuration for secure ZooKeeper access concurrent with secure access to HDFS.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7929) Port HADOOP-7070 to branch-1
Posted by "Andrew Purtell (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7929?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Andrew Purtell updated HADOOP-7929:
-----------------------------------
Attachment: HADOOP-7929.patch
TestUserGroupInformation passes. Running full suite now.
> Port HADOOP-7070 to branch-1
> ----------------------------
>
> Key: HADOOP-7929
> URL: https://issues.apache.org/jira/browse/HADOOP-7929
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 1.0.0, 1.1.0
> Reporter: Andrew Purtell
>
> Without HADOOP-7070, it is impossible to use secured Hadoop inside an application that relies on other JAAS configurations. This is the case for at least a secure HBase which currently needs an external JAAS configuration for secure ZooKeeper access concurrent with secure access to HDFS.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7929) Confirm branch-1 allows external
JAAS configurations
Posted by "Andrew Purtell (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7929?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Andrew Purtell updated HADOOP-7929:
-----------------------------------
Summary: Confirm branch-1 allows external JAAS configurations (was: Port HADOOP-7070 to branch-1)
Hmm, branch-1 is substantially different than 0.20.x in this area.
> Confirm branch-1 allows external JAAS configurations
> ----------------------------------------------------
>
> Key: HADOOP-7929
> URL: https://issues.apache.org/jira/browse/HADOOP-7929
> Project: Hadoop Common
> Issue Type: Bug
> Reporter: Andrew Purtell
>
> Without HADOOP-7070, it is impossible to use secured Hadoop inside an application that relies on other JAAS configurations. This is the case for at least a secure HBase which currently needs an external JAAS configuration for secure ZooKeeper access concurrent with secure access to HDFS.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Assigned] (HADOOP-7929) Port HADOOP-7070 to branch-1
Posted by "Eli Collins (Assigned) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7929?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Eli Collins reassigned HADOOP-7929:
-----------------------------------
Assignee: Andrew Purtell
> Port HADOOP-7070 to branch-1
> ----------------------------
>
> Key: HADOOP-7929
> URL: https://issues.apache.org/jira/browse/HADOOP-7929
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 1.0.0, 1.1.0
> Reporter: Andrew Purtell
> Assignee: Andrew Purtell
> Attachments: HADOOP-7929-branch-1.patch
>
>
> Without HADOOP-7070, it is impossible to use secured Hadoop inside an application that relies on other JAAS configurations. This is the case for at least a secure HBase which currently needs an external JAAS configuration for secure ZooKeeper access concurrent with secure access to HDFS.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7929) Port HADOOP-7070 to branch-1
Posted by "Jitendra Nath Pandey (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7929?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13170828#comment-13170828 ]
Jitendra Nath Pandey commented on HADOOP-7929:
----------------------------------------------
HADOOP-7853 removed the static setting of HadoopConfiguration for JAAS. Therefore HADOOP-7929 should not be relevant anymore. Could you please post the exception traces you are seeing?
> Port HADOOP-7070 to branch-1
> ----------------------------
>
> Key: HADOOP-7929
> URL: https://issues.apache.org/jira/browse/HADOOP-7929
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 1.0.0, 1.1.0
> Reporter: Andrew Purtell
> Attachments: HADOOP-7929-branch-1.patch
>
>
> Without HADOOP-7070, it is impossible to use secured Hadoop inside an application that relies on other JAAS configurations. This is the case for at least a secure HBase which currently needs an external JAAS configuration for secure ZooKeeper access concurrent with secure access to HDFS.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (HADOOP-7929) Port HADOOP-7070 to branch-1
Posted by "Andrew Purtell (Resolved) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7929?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Andrew Purtell resolved HADOOP-7929.
------------------------------------
Resolution: Invalid
I can confirm that the ZooKeeper client picks up the external JAAS configuration without the patch on this issue. Secure ZooKeeper communication continues to fail due to Kerberos related issues in my test environment but it seems not a Hadoop issue.
> Port HADOOP-7070 to branch-1
> ----------------------------
>
> Key: HADOOP-7929
> URL: https://issues.apache.org/jira/browse/HADOOP-7929
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 1.0.0, 1.1.0
> Reporter: Andrew Purtell
> Assignee: Andrew Purtell
> Attachments: HADOOP-7929-branch-1.patch
>
>
> Without HADOOP-7070, it is impossible to use secured Hadoop inside an application that relies on other JAAS configurations. This is the case for at least a secure HBase which currently needs an external JAAS configuration for secure ZooKeeper access concurrent with secure access to HDFS.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira