Details

    • Type: Sub-task Sub-task
    • Status: Closed
    • Priority: Blocker Blocker
    • Resolution: Fixed
    • Affects Version/s: 0.23.0, 2.0.0-alpha, 3.0.0
    • Fix Version/s: 3.0.0, 0.23.7, 2.1.0-beta
    • Component/s: webhdfs
    • Labels:
      None

      Description

      Webhdfs doesn't ever send the DoAsParam in the REST calls for proxy users. Proxy users on a non-secure cluster "work" because the server sees them as the effective user, not a proxy user, which effectively bypasses the proxy authorization checks. On secure clusters, it doesn't work at all in part due to wrong ugi being used for the connection (HDFS-3367), but then it fails because the effective user tries to use a non-proxy token for the real user.

      1. HDFS-4542.patch
        19 kB
        Daryn Sharp
      2. HDFS-4542.branch-23.patch
        19 kB
        Daryn Sharp
      3. HDFS-4542.patch
        19 kB
        Daryn Sharp

        Issue Links

          Activity

          Daryn Sharp created issue -
          Daryn Sharp made changes -
          Field Original Value New Value
          Link This issue is required by HDFS-3367 [ HDFS-3367 ]
          Daryn Sharp made changes -
          Attachment HDFS-4542.patch [ 12571649 ]
          Daryn Sharp made changes -
          Status Open [ 1 ] Patch Available [ 10002 ]
          Daryn Sharp made changes -
          Link This issue depends on HADOOP-9352 [ HADOOP-9352 ]
          Daryn Sharp made changes -
          Attachment HDFS-4542.patch [ 12571886 ]
          Daryn Sharp made changes -
          Attachment HDFS-4542.branch-23.patch [ 12571889 ]
          Daryn Sharp made changes -
          Attachment HDFS-4542.patch [ 12571886 ]
          Daryn Sharp made changes -
          Attachment HDFS-4542.patch [ 12571896 ]
          Kihwal Lee made changes -
          Status Patch Available [ 10002 ] Resolved [ 5 ]
          Fix Version/s 3.0.0 [ 12320356 ]
          Fix Version/s 0.23.7 [ 12323955 ]
          Fix Version/s 2.0.4-beta [ 12324031 ]
          Resolution Fixed [ 1 ]
          Daryn Sharp made changes -
          Link This issue relates to HDFS-4560 [ HDFS-4560 ]
          Daryn Sharp made changes -
          Parent HDFS-4576 [ 12636032 ]
          Issue Type Bug [ 1 ] Sub-task [ 7 ]
          Gavin made changes -
          Link This issue depends on HADOOP-9352 [ HADOOP-9352 ]
          Gavin made changes -
          Link This issue depends upon HADOOP-9352 [ HADOOP-9352 ]
          Arun C Murthy made changes -
          Status Resolved [ 5 ] Closed [ 6 ]

            People

            • Assignee:
              Daryn Sharp
              Reporter:
              Daryn Sharp
            • Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development