[HADOOP-10771] Refactor HTTP delegation support out of httpfs to common

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.0-alpha1
• Fix Version/s: 2.6.0
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Alejandro Abdelnur
• Reporter: Alejandro Abdelnur
• Created: 01/Jul/14 19:25
• Updated: 12/May/16 18:23
• Resolved: 08/Aug/14 05:05

Description

HttpFS implements delegation token support in AuthenticationFilter & AuthenticationHandler subclasses.

For HADOOP-10770 we need similar functionality for KMS.

Not to duplicate code, we should refactor existing code to common.

Issue Links

• blocks: HADOOP-10880 Move HTTP delegation tokens out of URL querystring to a header
• blocks: HADOOP-10770 KMS add delegation token support
• is related to: HADOOP-11207 DelegationTokenAuthenticationHandler needs to support DT operations for proxy user
• is related to: YARN-2292 RM web services should use hadoop-common for authentication using delegation tokens
• is required by: YARN-2100 Refactor the Timeline Server code for Kerberos + DT authentication

Sub-Tasks

• Refactor HTTP delegation token logic from httpfs into reusable code in hadoop-common.: Resolved
• Refactor HttpFS to use hadoop-common HTTP delegation token support.: Resolved