Uploaded image for project: 'Oozie'
  1. Oozie
  2. OOZIE-1148 Set the renewer correctly for JT/RM delegation tokens
  3. OOZIE-1159

Set the RM token renewer as the full service principal instead of short name

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 3.3.0
    • 3.3.1
    • None
    • None

    Description

      Hadoop 23 sets the renewer as the full service principal for hdfs delegation tokens. Doing the same for RM tokens. Using the short name, if there are Kerberos rule mappings mapping the principal to a different principal name it does not work.

      Attachments

        1. OOZIE-1159.patch
          5 kB
          Rohini Palaniswamy

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. OOZIE-1526 Oozie does not work with a secure HA JobTracker or ResourceManager

          • Major - Major loss of function.
          • Closed

          Activity

            People

              rohini Rohini Palaniswamy
              rohini Rohini Palaniswamy
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: