[HADOOP-12787] KMS SPNEGO sequence does not work with WEBHDFS - ASF JIRA

Voters

Watch issue

Watchers

Create sub-task

Link

Clone

Update Comment Author

Replace String in Comment

Update Comment Visibility

Delete Comments

XML

Word

Printable

JSON

Details

Type: Bug
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: 2.6.3
Fix Version/s: 2.8.0, 3.0.0-alpha1
Component/s: kms, security
Labels:
None

Hadoop Flags:

Reviewed

Description

This was a follow up of my comments for ~~HADOOP-10698~~.

It blocks a delegation token based user (MR) using WEBHDFS to access KMS server for encrypted files. This might work in many cases before as JDK 7 has been aggressively do SPENGO implicitly. However, this is not the case in JDK 8 as we have seen many failures when using WEBHDFS with KMS and HDFS encryption zone.