You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Yongjun Zhang (JIRA)" <ji...@apache.org> on 2017/06/06 19:48:18 UTC
[jira] [Moved] (HADOOP-14497) Logs for KMS delegation token
lifecycle
[ https://issues.apache.org/jira/browse/HADOOP-14497?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Yongjun Zhang moved HDFS-11938 to HADOOP-14497:
-----------------------------------------------
Key: HADOOP-14497 (was: HDFS-11938)
Project: Hadoop Common (was: Hadoop HDFS)
> Logs for KMS delegation token lifecycle
> ---------------------------------------
>
> Key: HADOOP-14497
> URL: https://issues.apache.org/jira/browse/HADOOP-14497
> Project: Hadoop Common
> Issue Type: Improvement
> Reporter: Yongjun Zhang
> Assignee: Xiao Chen
>
> We run into quite some customer cases about authentication failures related to KMS delegation token. It would be nice to see a log for each stage of the token:
> 1. creation
> 2. renewal
> 3. removal upon cancel
> 4. remove upon expiration
> So that when we correlate the logs for the same DT, we can have a good picture about what's going on, and what could have caused the authentication failure.
> The same is applicable to other delegation tokens.
> NOTE: When log info about delagation token, we don't want leak user's secret info.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org