Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-10776

Open up already widely-used APIs for delegation-token fetching & renewal to ecosystem projects

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.8.0, 3.0.0-alpha2
    • Component/s: None
    • Labels:
      None
    • Target Version/s:

      Description

      Storm would like to be able to fetch delegation tokens and forward them on to running topologies so that they can access HDFS (STORM-346). But to do so we need to open up access to some of APIs.

      Most notably FileSystem.addDelegationTokens(), Token.renew, Credentials.getAllTokens, and UserGroupInformation but there may be others.

      At a minimum adding in storm to the list of allowed API users. But ideally making them public. Restricting access to such important functionality to just MR really makes secure HDFS inaccessible to anything except MR, or tools that reuse MR input formats.

        Attachments

        1. HADOOP-10776-20160822.txt
          7 kB
          Vinod Kumar Vavilapalli
        2. HADOOP-10776-branch-2-002.patch
          8 kB
          Steve Loughran
        3. HADOOP-10776-branch-2-003.patch
          10 kB
          Steve Loughran

          Issue Links

            Activity

              People

              • Assignee:
                vinodkv Vinod Kumar Vavilapalli
                Reporter:
                revans2 Robert Joseph Evans
              • Votes:
                1 Vote for this issue
                Watchers:
                13 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: