[HADOOP-10173] Remove UGI from DIGEST-MD5 SASL server creation

• Type: Improvement
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 0.23.0, 2.3.0, 3.0.0-alpha1
• Fix Version/s: 2.3.0
• Component/s: ipc
• Hadoop Flags: Reviewed
• Assignee: Daryn Sharp
• Reporter: Daryn Sharp
• Created: 17/Dec/13 18:57
• Updated: 12/May/16 18:27
• Resolved: 02/Jan/14 15:01

Description

Instantiation of SASL server instances within the readers threads is performed within a UGI.getCurrentUser().doAs. getCurrentUser is synchronized, and doAs also degrades performance. GSSAPI (kerberos) requires instantiation within a doAs, but DIGEST-MD5 (token) does not.

Issue Links

• is related to: HADOOP-10174 Run RPC server within the Subject that instantiated it
• relates to: HADOOP-10172 Cache SASL server factories