Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-11207

DelegationTokenAuthenticationHandler needs to support DT operations for proxy user

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 2.6.0
    • security
    • None
    • Reviewed

    Description

      Currently, DelegationTokenAuthenticationHandler only support DT operations for the request user after it passes the authentication. However, it should also support the request user to do DT operations on behalf of the proxy user.

      Timeline server is using the authentication filter for DT operations instead of traditional RPC-based ones. It needs this feature to enable the proxy user to use the timeline service (YARN-2676).

      Attachments

        1. HADOOP-11207.1.patch
          18 kB
          Zhijie Shen
        2. HADOOP-11207.2.patch
          19 kB
          Zhijie Shen

        Issue Links

          Activity

            People

              zjshen Zhijie Shen
              zjshen Zhijie Shen
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: