[HDFS-4560] Webhdfs cannot use tokens obtained by another user

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.23.7, 2.1.0-beta, 3.0.0-alpha1
• Fix Version/s: 0.23.7, 2.0.4-alpha
• Component/s: webhdfs
• Target Version/s: 0.23.7, 2.1.0-beta
• Hadoop Flags: Reviewed
• Assignee: Daryn Sharp
• Reporter: Daryn Sharp
• Created: 06/Mar/13 21:31
• Updated: 12/May/16 18:18
• Resolved: 07/Mar/13 17:01

Description

Webhdfs passes UserParam even when a token is being used. The NN will construct the UGI from the token and error if the UserParam does not match the token's. This causes problems when a token for user A is used with user B's context. This is in contrast to hdfs which will honor the token's ugi no matter the client's current context. The passing of a token or user params should be mutually exclusive.

Issue Links

• is related to: HDFS-4542 Webhdfs doesn't support secure proxy users