Details

    • Type: Sub-task Sub-task
    • Status: Closed
    • Priority: Blocker Blocker
    • Resolution: Fixed
    • Affects Version/s: 0.23.0, 2.0.0-alpha, 3.0.0
    • Fix Version/s: 3.0.0, 0.23.7, 2.1.0-beta
    • Component/s: webhdfs
    • Labels:
      None

      Description

      Webhdfs doesn't ever send the DoAsParam in the REST calls for proxy users. Proxy users on a non-secure cluster "work" because the server sees them as the effective user, not a proxy user, which effectively bypasses the proxy authorization checks. On secure clusters, it doesn't work at all in part due to wrong ugi being used for the connection (HDFS-3367), but then it fails because the effective user tries to use a non-proxy token for the real user.

      1. HDFS-4542.patch
        19 kB
        Daryn Sharp
      2. HDFS-4542.patch
        19 kB
        Daryn Sharp
      3. HDFS-4542.branch-23.patch
        19 kB
        Daryn Sharp

        Issue Links

          Activity

            People

            • Assignee:
              Daryn Sharp
              Reporter:
              Daryn Sharp
            • Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development