Hadoop Common
  1. Hadoop Common
  2. HADOOP-10173

Remove UGI from DIGEST-MD5 SASL server creation

    Details

    • Type: Improvement Improvement
    • Status: Closed
    • Priority: Critical Critical
    • Resolution: Fixed
    • Affects Version/s: 0.23.0, 3.0.0, 2.3.0
    • Fix Version/s: 3.0.0, 2.3.0
    • Component/s: ipc
    • Labels:
      None
    • Hadoop Flags:
      Reviewed
    • Target Version/s:

      Description

      Instantiation of SASL server instances within the readers threads is performed within a UGI.getCurrentUser().doAs. getCurrentUser is synchronized, and doAs also degrades performance. GSSAPI (kerberos) requires instantiation within a doAs, but DIGEST-MD5 (token) does not.

        Issue Links

          Activity

            People

            • Assignee:
              Daryn Sharp
              Reporter:
              Daryn Sharp
            • Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development