Author: todd
Date: Wed Mar 7 18:42:46 2012
New Revision: 1298035
URL: http://svn.apache.org/viewvc?rev=1298035&view=rev
Log:
HADOOP-8141. Add method to SecurityUtil to init krb5 cipher suites. Contributed
by Todd Lipcon.
Modified:
hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/CHANGES.txt
hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/Krb5AndCertsSslSocketConnector.java
hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/SecurityUtil.java
Modified:
hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/CHANGES.txt
URL:
http://svn.apache.org/viewvc/hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/CHANGES.txt?rev=1298035&r1=1298034&r2=1298035&view=diff
==============================================================================
---
hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/CHANGES.txt
(original)
+++
hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/CHANGES.txt
Wed Mar 7 18:42:46 2012
@@ -71,6 +71,9 @@ Release 0.23.3 - UNRELEASED
HADOOP-8142. Update versions from 0.23.2 to 0.23.3 in the build files.
(szetszwo)
+ HADOOP-8141. Add method to SecurityUtil to init krb5 cipher suites.
+ (todd)
+
OPTIMIZATIONS
BUG FIXES
Modified:
hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/Krb5AndCertsSslSocketConnector.java
URL:
http://svn.apache.org/viewvc/hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/Krb5AndCertsSslSocketConnector.java?rev=1298035&r1=1298034&r2=1298035&view=diff
==============================================================================
---
hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/Krb5AndCertsSslSocketConnector.java
(original)
+++
hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/Krb5AndCertsSslSocketConnector.java
Wed Mar 7 18:42:46 2012
@@ -58,7 +58,7 @@ public class Krb5AndCertsSslSocketConnec
Collections.unmodifiableList(Collections.singletonList(
"TLS_KRB5_WITH_3DES_EDE_CBC_SHA"));
static {
- System.setProperty("https.cipherSuites", KRB5_CIPHER_SUITES.get(0));
+ SecurityUtil.initKrb5CipherSuites();
}
private static final Log LOG = LogFactory
Modified:
hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/SecurityUtil.java
URL:
http://svn.apache.org/viewvc/hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/SecurityUtil.java?rev=1298035&r1=1298034&r2=1298035&view=diff
==============================================================================
---
hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/SecurityUtil.java
(original)
+++
hadoop/common/branches/branch-0.23/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/SecurityUtil.java
Wed Mar 7 18:42:46 2012
@@ -598,4 +598,11 @@ public class SecurityUtil {
searchDomains = Arrays.asList(domains);
}
}
+
+ public static void initKrb5CipherSuites() {
+ if (UserGroupInformation.isSecurityEnabled()) {
+ System.setProperty("https.cipherSuites",
+ Krb5AndCertsSslSocketConnector.KRB5_CIPHER_SUITES.get(0));
+ }
+ }
}