[HADOOP-12752] Improve diagnostics/use of envvar/sysprop credential propagation

• Type: Sub-task
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.7.2
• Fix Version/s: 2.8.0, 3.0.0-alpha1
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Steve Loughran
• Reporter: Steve Loughran
• Created: 29/Jan/16 20:03
• Updated: 30/Aug/16 01:19
• Resolved: 08/Feb/16 17:46

Description

• document the system property hadoop.token.files.
• document the env var HADOOP_TOKEN_FILE_LOCATION.
• When UGI inits tokens off that or the env var , log this fact
• when trying to load a file referenced in the env var (a) trim it and (b) check for it existing, failing with a message referring to the ENV var as well as the file.

Issue Links

• is related to: YARN-4653 Document YARN security model from the perspective of Application Developers