[HADOOP-7070] JAAS configuration should delegate unknown application names to pre-existing configuration

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 0.22.0, 0.23.0
• Fix Version/s: 0.22.0
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Todd Lipcon
• Reporter: Todd Lipcon
• Created: 20/Dec/10 23:18
• Updated: 05/Feb/13 07:36
• Resolved: 06/Jan/11 18:35

Description

As reported here: https://issues.cloudera.org/browse/DISTRO-66 it is impossible to use secured Hadoop inside an application that relies on other JAAS configurations. This is because the static initializer of UserGroupInformation replaces the JAAS configuration, but we don't delegate unknown applications up to whatever Configuration was installed previously. The delegation technique seems to be used by JBoss's XMLLoginConfigImpl for example.

Issue Links

• is related to: HADOOP-7101 UserGroupInformation.getCurrentUser() fails when called from non-Hadoop JAAS context