Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-13206

Delegation token cannot be fetched and used by different versions of client

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Patch Available
    • Major
    • Resolution: Unresolved
    • 2.3.0, 2.6.1
    • None
    • security
    • None

    Description

      We have observed that an HDFS delegation token fetched by a 2.3.0 client cannot be used by a 2.6.1 client, and vice versa. Through some debugging I found that it's a mismatch between the token's service and the service of the filesystem (e.g. webhdfs://host.something.com:50070/). One would be in numerical IP address and one would be in non-numerical hostname format.

      Attachments

        1. HADOOP-13206.00.patch
          2 kB
          Zhe Zhang
        2. HADOOP-13206.01.patch
          2 kB
          Zhe Zhang
        3. HADOOP-13206.02.patch
          2 kB
          Zhe Zhang

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. MAPREDUCE-6565 Configuration to use host name in delegation token service is not read from job.xml during MapReduce job execution.

          • Major - Major loss of function.
          • Resolved
          relates to

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-7733 Mapreduce jobs are failing when JT has hadoop.security.token.service.use_ip=false and client has hadoop.security.token.service.use_ip=true

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              zhz Zhe Zhang
              zhz Zhe Zhang
              Votes:
              0 Vote for this issue
              Watchers:
              11 Start watching this issue

              Dates

                Created:
                Updated: