Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-14578

Bind IPC connections to kerberos UPN host for proxy users

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.0.0-alpha
    • Fix Version/s: 2.9.0, 3.0.0-beta1, 2.8.3
    • Component/s: ipc
    • Labels:
      None
    • Target Version/s:
    • Hadoop Flags:
      Reviewed

      Description

      The IPC client will only bind to a kerberos UPN host for the effective user. For proxy users, it does not bind to the authenticating real user's UPN host. This is inconsistent and prevents strict host checking of connection.

      1. HADOOP-14578.branch-2.8.patch
        8 kB
        Daryn Sharp
      2. HADOOP-14578.patch
        8 kB
        Kihwal Lee
      3. HADOOP-14578.patch
        8 kB
        Daryn Sharp

        Activity

        Hide
        hadoopqa Hadoop QA added a comment -
        -1 overall



        Vote Subsystem Runtime Comment
        0 reexec 16m 44s Docker mode activated.
        +1 @author 0m 0s The patch does not contain any @author tags.
        +1 test4tests 0m 0s The patch appears to include 1 new or modified test files.
        -1 mvninstall 1m 45s root in branch-2.8 failed.
        +1 compile 13m 7s branch-2.8 passed with JDK v1.8.0_131
        -1 compile 0m 43s root in branch-2.8 failed with JDK v1.7.0_131.
        +1 checkstyle 0m 11s branch-2.8 passed
        -1 mvnsite 0m 8s hadoop-common in branch-2.8 failed.
        -1 findbugs 0m 7s hadoop-common in branch-2.8 failed.
        -1 javadoc 0m 7s hadoop-common in branch-2.8 failed with JDK v1.8.0_131.
        -1 javadoc 0m 8s hadoop-common in branch-2.8 failed with JDK v1.7.0_131.
        -1 mvninstall 0m 7s hadoop-common in the patch failed.
        +1 compile 6m 20s the patch passed with JDK v1.8.0_131
        +1 javac 6m 20s the patch passed
        -1 compile 0m 22s root in the patch failed with JDK v1.7.0_131.
        -1 javac 0m 22s root in the patch failed with JDK v1.7.0_131.
        +1 checkstyle 0m 9s the patch passed
        -1 mvnsite 0m 7s hadoop-common in the patch failed.
        +1 whitespace 0m 0s The patch has no whitespace issues.
        -1 findbugs 0m 8s hadoop-common in the patch failed.
        -1 javadoc 0m 7s hadoop-common in the patch failed with JDK v1.8.0_131.
        -1 javadoc 0m 8s hadoop-common in the patch failed with JDK v1.7.0_131.
        -1 unit 0m 8s hadoop-common in the patch failed with JDK v1.7.0_131.
        +1 asflicense 0m 18s The patch does not generate ASF License warnings.
        41m 57s



        Subsystem Report/Notes
        Docker Image:yetus/hadoop:d946387
        JIRA Issue HADOOP-14578
        JIRA Patch URL https://issues.apache.org/jira/secure/attachment/12874150/HADOOP-14578.branch-2.8.patch
        Optional Tests asflicense compile javac javadoc mvninstall mvnsite unit findbugs checkstyle
        uname Linux ebe91b2d8a7b 4.4.0-43-generic #63-Ubuntu SMP Wed Oct 12 13:48:03 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
        Build tool maven
        Personality /testptch/hadoop/patchprocess/precommit/personality/provided.sh
        git revision branch-2.8 / 81eb06b
        Default Java 1.7.0_131
        Multi-JDK versions /usr/lib/jvm/java-8-oracle:1.8.0_131 /usr/lib/jvm/java-7-openjdk-amd64:1.7.0_131
        mvninstall https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/branch-mvninstall-root.txt
        compile https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/branch-compile-root-jdk1.7.0_131.txt
        mvnsite https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/branch-mvnsite-hadoop-common-project_hadoop-common.txt
        findbugs https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/branch-findbugs-hadoop-common-project_hadoop-common.txt
        javadoc https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/branch-javadoc-hadoop-common-project_hadoop-common-jdk1.8.0_131.txt
        javadoc https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/branch-javadoc-hadoop-common-project_hadoop-common-jdk1.7.0_131.txt
        mvninstall https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/patch-mvninstall-hadoop-common-project_hadoop-common.txt
        compile https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/patch-compile-root-jdk1.7.0_131.txt
        javac https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/patch-compile-root-jdk1.7.0_131.txt
        mvnsite https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/patch-mvnsite-hadoop-common-project_hadoop-common.txt
        findbugs https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/patch-findbugs-hadoop-common-project_hadoop-common.txt
        javadoc https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/patch-javadoc-hadoop-common-project_hadoop-common-jdk1.8.0_131.txt
        javadoc https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/patch-javadoc-hadoop-common-project_hadoop-common-jdk1.7.0_131.txt
        unit https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/patch-unit-hadoop-common-project_hadoop-common-jdk1.7.0_131.txt
        JDK v1.7.0_131 Test Results https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/testReport/
        modules C: hadoop-common-project/hadoop-common U: hadoop-common-project/hadoop-common
        Console output https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/console
        Powered by Apache Yetus 0.5.0-SNAPSHOT http://yetus.apache.org

        This message was automatically generated.

        Show
        hadoopqa Hadoop QA added a comment - -1 overall Vote Subsystem Runtime Comment 0 reexec 16m 44s Docker mode activated. +1 @author 0m 0s The patch does not contain any @author tags. +1 test4tests 0m 0s The patch appears to include 1 new or modified test files. -1 mvninstall 1m 45s root in branch-2.8 failed. +1 compile 13m 7s branch-2.8 passed with JDK v1.8.0_131 -1 compile 0m 43s root in branch-2.8 failed with JDK v1.7.0_131. +1 checkstyle 0m 11s branch-2.8 passed -1 mvnsite 0m 8s hadoop-common in branch-2.8 failed. -1 findbugs 0m 7s hadoop-common in branch-2.8 failed. -1 javadoc 0m 7s hadoop-common in branch-2.8 failed with JDK v1.8.0_131. -1 javadoc 0m 8s hadoop-common in branch-2.8 failed with JDK v1.7.0_131. -1 mvninstall 0m 7s hadoop-common in the patch failed. +1 compile 6m 20s the patch passed with JDK v1.8.0_131 +1 javac 6m 20s the patch passed -1 compile 0m 22s root in the patch failed with JDK v1.7.0_131. -1 javac 0m 22s root in the patch failed with JDK v1.7.0_131. +1 checkstyle 0m 9s the patch passed -1 mvnsite 0m 7s hadoop-common in the patch failed. +1 whitespace 0m 0s The patch has no whitespace issues. -1 findbugs 0m 8s hadoop-common in the patch failed. -1 javadoc 0m 7s hadoop-common in the patch failed with JDK v1.8.0_131. -1 javadoc 0m 8s hadoop-common in the patch failed with JDK v1.7.0_131. -1 unit 0m 8s hadoop-common in the patch failed with JDK v1.7.0_131. +1 asflicense 0m 18s The patch does not generate ASF License warnings. 41m 57s Subsystem Report/Notes Docker Image:yetus/hadoop:d946387 JIRA Issue HADOOP-14578 JIRA Patch URL https://issues.apache.org/jira/secure/attachment/12874150/HADOOP-14578.branch-2.8.patch Optional Tests asflicense compile javac javadoc mvninstall mvnsite unit findbugs checkstyle uname Linux ebe91b2d8a7b 4.4.0-43-generic #63-Ubuntu SMP Wed Oct 12 13:48:03 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux Build tool maven Personality /testptch/hadoop/patchprocess/precommit/personality/provided.sh git revision branch-2.8 / 81eb06b Default Java 1.7.0_131 Multi-JDK versions /usr/lib/jvm/java-8-oracle:1.8.0_131 /usr/lib/jvm/java-7-openjdk-amd64:1.7.0_131 mvninstall https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/branch-mvninstall-root.txt compile https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/branch-compile-root-jdk1.7.0_131.txt mvnsite https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/branch-mvnsite-hadoop-common-project_hadoop-common.txt findbugs https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/branch-findbugs-hadoop-common-project_hadoop-common.txt javadoc https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/branch-javadoc-hadoop-common-project_hadoop-common-jdk1.8.0_131.txt javadoc https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/branch-javadoc-hadoop-common-project_hadoop-common-jdk1.7.0_131.txt mvninstall https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/patch-mvninstall-hadoop-common-project_hadoop-common.txt compile https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/patch-compile-root-jdk1.7.0_131.txt javac https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/patch-compile-root-jdk1.7.0_131.txt mvnsite https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/patch-mvnsite-hadoop-common-project_hadoop-common.txt findbugs https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/patch-findbugs-hadoop-common-project_hadoop-common.txt javadoc https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/patch-javadoc-hadoop-common-project_hadoop-common-jdk1.8.0_131.txt javadoc https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/patch-javadoc-hadoop-common-project_hadoop-common-jdk1.7.0_131.txt unit https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/artifact/patchprocess/patch-unit-hadoop-common-project_hadoop-common-jdk1.7.0_131.txt JDK v1.7.0_131 Test Results https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/testReport/ modules C: hadoop-common-project/hadoop-common U: hadoop-common-project/hadoop-common Console output https://builds.apache.org/job/PreCommit-HADOOP-Build/12609/console Powered by Apache Yetus 0.5.0-SNAPSHOT http://yetus.apache.org This message was automatically generated.
        Hide
        shahrs87 Rushabh S Shah added a comment - - edited

        Daryn Sharp: +1 for the patch.
        It applies cleanly to trunk..I think HadoopQA didnt run at all on trunk.
        can you please refresh the branch-2/branch-2.8 patch.

        Show
        shahrs87 Rushabh S Shah added a comment - - edited Daryn Sharp : +1 for the patch. It applies cleanly to trunk..I think HadoopQA didnt run at all on trunk. can you please refresh the branch-2/branch-2.8 patch.
        Hide
        kihwal Kihwal Lee added a comment -

        Kicked the precommit.

        Show
        kihwal Kihwal Lee added a comment - Kicked the precommit.
        Hide
        kihwal Kihwal Lee added a comment -

        reattaching the same trunk patch

        Show
        kihwal Kihwal Lee added a comment - reattaching the same trunk patch
        Hide
        hadoopqa Hadoop QA added a comment -
        +1 overall



        Vote Subsystem Runtime Comment
        0 reexec 0m 18s Docker mode activated.
              Prechecks
        +1 @author 0m 0s The patch does not contain any @author tags.
        +1 test4tests 0m 0s The patch appears to include 1 new or modified test files.
              trunk Compile Tests
        +1 mvninstall 14m 55s trunk passed
        +1 compile 15m 46s trunk passed
        +1 checkstyle 0m 38s trunk passed
        +1 mvnsite 1m 37s trunk passed
        +1 findbugs 1m 27s trunk passed
        +1 javadoc 0m 51s trunk passed
              Patch Compile Tests
        +1 mvninstall 0m 40s the patch passed
        +1 compile 10m 52s the patch passed
        +1 javac 10m 52s the patch passed
        +1 checkstyle 0m 37s hadoop-common-project/hadoop-common: The patch generated 0 new + 174 unchanged - 2 fixed = 174 total (was 176)
        +1 mvnsite 1m 28s the patch passed
        +1 whitespace 0m 0s The patch has no whitespace issues.
        +1 findbugs 1m 36s the patch passed
        +1 javadoc 0m 48s the patch passed
              Other Tests
        +1 unit 8m 21s hadoop-common in the patch passed.
        +1 asflicense 0m 40s The patch does not generate ASF License warnings.
        62m 22s



        Subsystem Report/Notes
        Docker Image:yetus/hadoop:14b5c93
        JIRA Issue HADOOP-14578
        JIRA Patch URL https://issues.apache.org/jira/secure/attachment/12878829/HADOOP-14578.patch
        Optional Tests asflicense compile javac javadoc mvninstall mvnsite unit findbugs checkstyle
        uname Linux ba2f5567e901 3.13.0-119-generic #166-Ubuntu SMP Wed May 3 12:18:55 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
        Build tool maven
        Personality /testptch/hadoop/patchprocess/precommit/personality/provided.sh
        git revision trunk / ac9489f
        Default Java 1.8.0_131
        findbugs v3.1.0-RC1
        Test Results https://builds.apache.org/job/PreCommit-HADOOP-Build/12854/testReport/
        modules C: hadoop-common-project/hadoop-common U: hadoop-common-project/hadoop-common
        Console output https://builds.apache.org/job/PreCommit-HADOOP-Build/12854/console
        Powered by Apache Yetus 0.6.0-SNAPSHOT http://yetus.apache.org

        This message was automatically generated.

        Show
        hadoopqa Hadoop QA added a comment - +1 overall Vote Subsystem Runtime Comment 0 reexec 0m 18s Docker mode activated.       Prechecks +1 @author 0m 0s The patch does not contain any @author tags. +1 test4tests 0m 0s The patch appears to include 1 new or modified test files.       trunk Compile Tests +1 mvninstall 14m 55s trunk passed +1 compile 15m 46s trunk passed +1 checkstyle 0m 38s trunk passed +1 mvnsite 1m 37s trunk passed +1 findbugs 1m 27s trunk passed +1 javadoc 0m 51s trunk passed       Patch Compile Tests +1 mvninstall 0m 40s the patch passed +1 compile 10m 52s the patch passed +1 javac 10m 52s the patch passed +1 checkstyle 0m 37s hadoop-common-project/hadoop-common: The patch generated 0 new + 174 unchanged - 2 fixed = 174 total (was 176) +1 mvnsite 1m 28s the patch passed +1 whitespace 0m 0s The patch has no whitespace issues. +1 findbugs 1m 36s the patch passed +1 javadoc 0m 48s the patch passed       Other Tests +1 unit 8m 21s hadoop-common in the patch passed. +1 asflicense 0m 40s The patch does not generate ASF License warnings. 62m 22s Subsystem Report/Notes Docker Image:yetus/hadoop:14b5c93 JIRA Issue HADOOP-14578 JIRA Patch URL https://issues.apache.org/jira/secure/attachment/12878829/HADOOP-14578.patch Optional Tests asflicense compile javac javadoc mvninstall mvnsite unit findbugs checkstyle uname Linux ba2f5567e901 3.13.0-119-generic #166-Ubuntu SMP Wed May 3 12:18:55 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux Build tool maven Personality /testptch/hadoop/patchprocess/precommit/personality/provided.sh git revision trunk / ac9489f Default Java 1.8.0_131 findbugs v3.1.0-RC1 Test Results https://builds.apache.org/job/PreCommit-HADOOP-Build/12854/testReport/ modules C: hadoop-common-project/hadoop-common U: hadoop-common-project/hadoop-common Console output https://builds.apache.org/job/PreCommit-HADOOP-Build/12854/console Powered by Apache Yetus 0.6.0-SNAPSHOT http://yetus.apache.org This message was automatically generated.
        Hide
        kihwal Kihwal Lee added a comment -

        +1 the patch looks good.

        Show
        kihwal Kihwal Lee added a comment - +1 the patch looks good.
        Hide
        kihwal Kihwal Lee added a comment -

        Committed it to trunk, branch-2 and branch-2.8.

        Show
        kihwal Kihwal Lee added a comment - Committed it to trunk, branch-2 and branch-2.8.
        Hide
        hudson Hudson added a comment -

        SUCCESS: Integrated in Jenkins build Hadoop-trunk-Commit #12056 (See https://builds.apache.org/job/Hadoop-trunk-Commit/12056/)
        HADOOP-14578. Bind IPC connections to kerberos UPN host for proxy users. (kihwal: rev 27a1a5fde94d4d7ea0ed172635c146d594413781)

        • (edit) hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/Client.java
        • (edit) hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/ipc/TestIPC.java
        Show
        hudson Hudson added a comment - SUCCESS: Integrated in Jenkins build Hadoop-trunk-Commit #12056 (See https://builds.apache.org/job/Hadoop-trunk-Commit/12056/ ) HADOOP-14578 . Bind IPC connections to kerberos UPN host for proxy users. (kihwal: rev 27a1a5fde94d4d7ea0ed172635c146d594413781) (edit) hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/Client.java (edit) hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/ipc/TestIPC.java

          People

          • Assignee:
            daryn Daryn Sharp
            Reporter:
            daryn Daryn Sharp
          • Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development