[HADOOP-15758] Filesystem.get(URI, Configuration, user) API not working with proxy users

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Not A Problem
• Affects Version/s: 2.6.0, 3.0.0
• Assignee: Hrishikesh Gadre
• Reporter: Hrishikesh Gadre
• Created: 14/Sep/18 19:22
• Updated: 05/Oct/18 19:45
• Resolved: 05/Oct/18 19:45

Description

A user reported that the Filesystem.get API is not working as expected when they use the 'FileSystem.get(URI, Configuration, user)' method signature - but 'FileSystem.get(URI, Configuration)' works fine. The user is trying to use this method signature to mimic proxy user functionality e.g. provide ticket cache based kerberos credentials (using KRB5CCNAME env variable) for the proxy user and then in the java program pass name of the user to be impersonated. The alternative, to use proxy users functionality in Hadoop works as expected.

 

Since FileSystem.get(URI, Configuration, user) is a public API and it does not restrict its usage in this fashion, we should ideally make it work or add docs to discourage its usage to implement proxy users.

 

Issue Links

• is related to: HADOOP-12953 New API for libhdfs to get FileSystem object as a proxy user