[ACCUMULO-3224] Shell should use nanos for auth timeout

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.5.3, 1.6.2, 1.7.0
• Component/s: shell
• Assignee: Christopher Tubbs
• Reporter: Christopher Tubbs
• Created: 10/Oct/14 20:31
• Updated: 14/Oct/14 15:43
• Resolved: 10/Oct/14 23:20

Description

I was looking at the code done for ACCUMULO-3221 and noticed that we're using the system clock instead of the JDK's internal relative time, System.nanoTime(). This is a problem, because any auth timeout that depends on the system clock can be easily bypassed by changing the system time.

We can also do the time conversion more reliably with TimeUnit to avoid the potential arithmetic bug identified in ACCUMULO-3221.

Issue Links

• breaks: ACCUMULO-3229 Shell displays authTimeout poorly
• supercedes: ACCUMULO-3221 Unintential integer overflow in Shell authorization timeout