Uploaded image for project: 'Hadoop YARN'
  1. Hadoop YARN
  2. YARN-47 [Umbrella] Security issues in YARN
  3. YARN-135

ClientTokens should be per app-attempt and be unregistered on App-finish.

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 0.23.3
    • 2.0.3-alpha
    • resourcemanager
    • None

    Description

      Two issues:

      • ClientTokens are per app-attempt but are created per app.
      • Apps don't get unregistered from RMClientTokenSecretManager.

      Attachments

        1. YARN-135-20120928.txt
          94 kB
          Vinod Kumar Vavilapalli
        2. YARN-135-20121019.1.txt
          91 kB
          Vinod Kumar Vavilapalli
        3. YARN-135-20121019.2.txt
          91 kB
          Vinod Kumar Vavilapalli
        4. YARN-135-20121019.3.txt
          93 kB
          Vinod Kumar Vavilapalli
        5. YARN-135-20121019.4.txt
          94 kB
          Vinod Kumar Vavilapalli
        6. YARN-135-2013007.txt
          90 kB
          Vinod Kumar Vavilapalli
        7. YARN-135-2013007.1.txt
          90 kB
          Vinod Kumar Vavilapalli

        Issue Links

          is blocked by

          Bug - A problem which impairs or prevents the functions of the product. YARN-136 Make ClientTokenSecretManager part of RMContext

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. YARN-315 Use security token protobuf definition from hadoop common

          • Major - Major loss of function.
          • Closed

          Activity

            People

              vinodkv Vinod Kumar Vavilapalli
              vinodkv Vinod Kumar Vavilapalli
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: