[HADOOP-14578] Bind IPC connections to kerberos UPN host for proxy users

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0-alpha
• Fix Version/s: 2.9.0, 3.0.0-beta1, 2.8.3
• Component/s: ipc
• Target Version/s: 2.8.2
• Hadoop Flags: Reviewed
• Assignee: Daryn Sharp
• Reporter: Daryn Sharp
• Created: 22/Jun/17 22:38
• Updated: 26/Jul/17 18:39
• Resolved: 26/Jul/17 18:30

Description

The IPC client will only bind to a kerberos UPN host for the effective user. For proxy users, it does not bind to the authenticating real user's UPN host. This is inconsistent and prevents strict host checking of connection.