Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-12453

Support decoding KMS Delegation Token with its own Identifier

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.4.0
    • Fix Version/s: 2.8.0, 3.0.0-alpha2
    • Component/s: kms, security
    • Labels:
      None
    • Hadoop Flags:
      Reviewed

      Description

      kms-dt currently does not have its own token identifier class to decode it properly as shown in the HDFS logs below. This JIRA is opened to add support for that.

      2015-09-30 22:36:14,379|beaver.machine|INFO|5619|140004068153152|MainThread|15/09/30 22:36:14 WARN token.Token: Cannot find class for token kind kms-dt
      2015-09-30 22:36:14,380|beaver.machine|INFO|5619|140004068153152|MainThread|15/09/30 22:36:14 INFO security.TokenCache: Got dt for hdfs://tde-hdfs-3.novalocal:8020; Kind: kms-dt, Service: 172.22.64.179:9292, Ident: 00 06 68 72 74 5f 71 61 02 72 6d 00 8a 01 50 20 66 1c a3 8a 01 50 44 72 a0 a3 0f 03
      

        Attachments

        1. HADOOP-12453.00.patch
          5 kB
          Xiaoyu Yao
        2. HADOOP-12453.01.patch
          4 kB
          Xiaoyu Yao
        3. HADOOP-12453.02.patch
          10 kB
          Xiaoyu Yao
        4. HADOOP-12453.03.patch
          10 kB
          Xiao Chen
        5. HADOOP-12453.04.patch
          10 kB
          Xiao Chen
        6. HADOOP-12453.05.patch
          10 kB
          Xiao Chen

          Issue Links

            Activity

              People

              • Assignee:
                xyao Xiaoyu Yao
                Reporter:
                xyao Xiaoyu Yao
              • Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: