[YARN-3761] Set delegation token service address at the server side

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Assignee: Varun Saxena
• Reporter: Zhijie Shen
• Created: 02/Jun/15 16:52
• Updated: 02/Jun/15 18:28

Description

Nowadays, YARN components generate the delegation token without the service address set, and leave it to the client to set. With our java client library, it is usually fine. However, if users are using REST API, it's going to be a problem: The delegation token is returned as a url string. It's so unfriendly for the thin client to deserialize the url string, set the token service address and serialize it again for further usage. If we move the task of setting the service address to the server side, the client can get rid of this trouble.

Issue Links

• relates to: YARN-3725 App submission via REST API is broken in secure mode due to Timeline DT service address is empty