Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-14351

Azure: RemoteWasbAuthorizerImpl and RemoteSASKeyGeneratorImpl should not use Kerberos interactive user cache

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 2.9.0
    • 2.9.0, 3.0.0-alpha4
    • fs/azure
    • None

    Description

      Currently, RemoteWasbAuthorizerImpl.getRelativeBlobSASUri(), RemoteWasbAuthorizerImpl.getContainerSASUri() and RemoteSASKeyGeneratorImpl.authorize() use Kerberos interactive user's ticket cache if the kerberos credential is not available for UserGroupInformation.getCurrentUser() or UserGroupInformation.getRealUser().
      It results in usage of interactive user's ticket for impersonation, whenever services try to do File System operations as another user, which is incorrect.

      Attachments

        1. HADOOP-14351.2.patch
          9 kB
          Santhosh G Nayak
        2. HADOOP-14351.1.patch
          8 kB
          Santhosh G Nayak

        Activity

          People

            snayak Santhosh G Nayak
            snayak Santhosh G Nayak
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: