[HADOOP-10566] Refactor proxyservers out of ProxyUsers

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.4.0
• Fix Version/s: 2.5.0
• Component/s: security
• Target Version/s: 2.5.0
• Assignee: Benoy Antony
• Reporter: Benoy Antony
• Created: 02/May/14 06:28
• Updated: 03/Sep/14 20:36
• Resolved: 28/May/14 21:12

Description

HADOOP-10498 added proxyservers feature in ProxyUsers. It is beneficial to treat this as a separate feature since

1> The ProxyUsers is per proxyuser where as proxyservers is per cluster. The cardinality is different.

2> The ProxyUsers.authorize() and ProxyUsers.isproxyUser() are synchronized and hence share the same lock and impacts performance.

Since these are two separate features, it will be an improvement to keep them separate. It also enables one to fine-tune each feature independently.

Issue Links

• is depended upon by: HADOOP-10448 Support pluggable mechanism to specify proxy user settings
• is related to: HADOOP-10498 Add support for proxy server