Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-13548

Remove recursive dependencies of credential providers in LdapGroupsMapping

    Details

    • Type: Bug
    • Status: Patch Available
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 2.6.0
    • Fix Version/s: None
    • Component/s: security
    • Labels:
      None

      Description

      HADOOP-11934 discovered an infinite loop of dependencies in the use of credential provider in LdapGroupsMapping. It added a new localjceks:// URI to workaround the problem. The assumption is that the groups mapping is used only in NameNode and that using a local credential file is not a problem.

      However, there are cases where Hadoop clients, such as Sqoop, may use hdfs:// based credential provider and use LdapGroupsMapping at the same time. We should use HADOOP-12846 to exclude hdfs:// URI credential providers.

        Attachments

        1. HADOOP-13548.002.patch
          15 kB
          Wei-Chiu Chuang
        2. HADOOP-13548.001.patch
          7 kB
          Wei-Chiu Chuang

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                jojochuang Wei-Chiu Chuang
              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated: