[HADOOP-12453] Support decoding KMS Delegation Token with its own Identifier

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.4.0
• Fix Version/s: 2.8.0, 3.0.0-alpha2
• Component/s: kms, security
• Hadoop Flags: Reviewed
• Assignee: Xiaoyu Yao Assign to me
• Reporter: Xiaoyu Yao
• Created: 30/Sep/15 22:47
• Updated: 03/Nov/16 20:22
• Resolved: 03/Nov/16 20:12

Description

kms-dt currently does not have its own token identifier class to decode it properly as shown in the HDFS logs below. This JIRA is opened to add support for that.

2015-09-30 22:36:14,379|beaver.machine|INFO|5619|140004068153152|MainThread|15/09/30 22:36:14 WARN token.Token: Cannot find class for token kind kms-dt
2015-09-30 22:36:14,380|beaver.machine|INFO|5619|140004068153152|MainThread|15/09/30 22:36:14 INFO security.TokenCache: Got dt for hdfs://tde-hdfs-3.novalocal:8020; Kind: kms-dt, Service: 172.22.64.179:9292, Ident: 00 06 68 72 74 5f 71 61 02 72 6d 00 8a 01 50 20 66 1c a3 8a 01 50 44 72 a0 a3 0f 03

Issue Links

• is related to: HADOOP-11180 Change log message "token.Token: Cannot find class for token kind kms-dt" to debug