Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-9085

Show renewer information in DelegationTokenIdentifier#toString

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Trivial
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.0.0-alpha1
    • Component/s: security
    • Labels:
      None
    • Target Version/s:
    • Hadoop Flags:
      Incompatible change, Reviewed
    • Release Note:
      The output of the "hdfs fetchdt --print" command now includes the token renewer appended to the end of the existing token information. This change may be incompatible with tools that parse the output of the command.

      Description

      Show renewer information in DelegationTokenIdentifier#toString. Currently
      org.apache.hadoop.hdfs.security.token.delegation.DelegationTokenIdentifier didn't show the renewer information. It will be very useful to have renewer information to debug security related issue. Because the renewer will be filtered by "hadoop.security.auth_to_local", it will be helpful to show the real renewer info after applying the rules.

        Attachments

        1. HDFS-9085.001.patch
          0.9 kB
          zhihai xu
        2. HDFS-9085.002.patch
          2 kB
          zhihai xu

          Issue Links

            Activity

              People

              • Assignee:
                zxu zhihai xu
                Reporter:
                zxu zhihai xu
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: