Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-12954

Add a way to change hadoop.security.token.service.use_ip

Log workAgile BoardRank to TopRank to BottomAttach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskConvert to sub-taskMoveLinkCloneLabelsUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.6.0
    • Fix Version/s: 2.9.0, 3.0.0-alpha1
    • Component/s: security
    • Labels:
      None
    • Target Version/s:
    • Hadoop Flags:
      Reviewed

      Description

      Currently, hadoop.security.token.service.use_ip is set on JVM startup via:

        static {
          Configuration conf = new Configuration();
          boolean useIp = conf.getBoolean(
              CommonConfigurationKeys.HADOOP_SECURITY_TOKEN_SERVICE_USE_IP,
              CommonConfigurationKeys.HADOOP_SECURITY_TOKEN_SERVICE_USE_IP_DEFAULT);
          setTokenServiceUseIp(useIp);
        }
      

      This is a problem for clients, such as Oozie, who don't add *-site.xml files to their classpath. Oozie normally creates a JobClient and passes a Configuration to it with the proper configs we need. However, because hadoop.security.token.service.use_ip is specified in a static block like this, and there's no API to change it, Oozie has no way to set it to the non-default value.

      I propose we add a setConfiguration method which takes a Configuration and rereads hadoop.security.token.service.use_ip. There's a few other properties that are also loaded statically on startup that can be reloaded here as well.

        Attachments

        1. HADOOP-12954.003.patch
          5 kB
          Robert Kanter
        2. HADOOP-12954.002.patch
          5 kB
          Robert Kanter
        3. HADOOP-12954.001.patch
          5 kB
          Robert Kanter

        Issue Links

          Activity

          $i18n.getText('security.level.explanation', $currentSelection) Viewable by All Users
          Cancel

            People

            • Assignee:
              rkanter Robert Kanter Assign to me
              Reporter:
              rkanter Robert Kanter

              Dates

              • Created:
                Updated:
                Resolved:

                Issue deployment