Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-12300

Audit-log delegation token related operations

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 0.22.0
    • 3.0.0-beta1
    • namenode
    • None
    • Reviewed
    • Hide
      <!-- markdown -->

      NameNode now audit-logs `getDelegationToken`, `renewDelegationToken`, `cancelDelegationToken`.
      Show
      <!-- markdown --> NameNode now audit-logs `getDelegationToken`, `renewDelegationToken`, `cancelDelegationToken`.

    Description

      When inspecting the code, I found that the following methods in FSNamesystem are not audit logged:

      • getDelegationToken
      • renewDelegationToken
      • cancelDelegationToken

      The audit log itself does have a logTokenTrackingId field to additionally log some details when a token is used for authentication.

      After emailing the community, we should add that.

      Attachments

        1. HDFS-12300.02.patch
          10 kB
          Xiao Chen
        2. HDFS-12300.01.patch
          10 kB
          Xiao Chen

        Issue Links

          Activity

            People

              xiaochen Xiao Chen
              xiaochen Xiao Chen
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: