[HDFS-9085] Show renewer information in DelegationTokenIdentifier#toString

• Type: Improvement
• Status: Resolved
• Priority: Trivial
• Resolution: Fixed
• Fix Version/s: 3.0.0-alpha1
• Component/s: security
• Hadoop Flags: Incompatible change, Reviewed
• Release Note: The output of the "hdfs fetchdt --print" command now includes the token renewer appended to the end of the existing token information. This change may be incompatible with tools that parse the output of the command.
• Assignee: Zhihai Xu
• Reporter: Zhihai Xu
• Created: 15/Sep/15 23:40
• Updated: 12/May/16 18:14
• Resolved: 09/Oct/15 21:29

Description

Show renewer information in DelegationTokenIdentifier#toString. Currently
org.apache.hadoop.hdfs.security.token.delegation.DelegationTokenIdentifier didn't show the renewer information. It will be very useful to have renewer information to debug security related issue. Because the renewer will be filtered by "hadoop.security.auth_to_local", it will be helpful to show the real renewer info after applying the rules.

Issue Links

• is related to: HDFS-10211 Add more info to DelegationTokenIdentifier#toString for better supportability