Author: suresh
Date: Wed Oct 17 05:33:18 2012
New Revision: 1399102
URL: http://svn.apache.org/viewvc?rev=1399102&view=rev
Log:
HADOOP-8882. Uppercase namenode host name causes fsck to fail when useKsslAuth
is on. Contributed by Arpit Gupta.
Modified:
hadoop/common/branches/branch-1/CHANGES.txt
hadoop/common/branches/branch-1/src/core/org/apache/hadoop/security/SecurityUtil.java
Modified: hadoop/common/branches/branch-1/CHANGES.txt
URL:
http://svn.apache.org/viewvc/hadoop/common/branches/branch-1/CHANGES.txt?rev=1399102&r1=1399101&r2=1399102&view=diff
==============================================================================
--- hadoop/common/branches/branch-1/CHANGES.txt (original)
+++ hadoop/common/branches/branch-1/CHANGES.txt Wed Oct 17 05:33:18 2012
@@ -251,6 +251,9 @@ Release 1.2.0 - unreleased
MAPREDUCE-4451. fairscheduler fail to init job with kerberos
authentication
configured. (erik.fang via tucu)
+ HADOOP-8882. Uppercase namenode host name causes fsck to fail when
+ useKsslAuth is on. (Arpit Gupta via suresh)
+
Release 1.1.0 - unreleased
INCOMPATIBLE CHANGES
Modified:
hadoop/common/branches/branch-1/src/core/org/apache/hadoop/security/SecurityUtil.java
URL:
http://svn.apache.org/viewvc/hadoop/common/branches/branch-1/src/core/org/apache/hadoop/security/SecurityUtil.java?rev=1399102&r1=1399101&r2=1399102&view=diff
==============================================================================
---
hadoop/common/branches/branch-1/src/core/org/apache/hadoop/security/SecurityUtil.java
(original)
+++
hadoop/common/branches/branch-1/src/core/org/apache/hadoop/security/SecurityUtil.java
Wed Oct 17 05:33:18 2012
@@ -43,6 +43,7 @@ import org.apache.hadoop.io.Text;
import org.apache.hadoop.net.NetUtils;
import org.apache.hadoop.security.authentication.client.AuthenticatedURL;
import
org.apache.hadoop.security.authentication.client.AuthenticationException;
+import org.apache.hadoop.security.authentication.util.KerberosUtil;
import org.apache.hadoop.security.authorize.AccessControlList;
import org.apache.hadoop.security.token.Token;
@@ -136,7 +137,8 @@ public class SecurityUtil {
if(!UserGroupInformation.isSecurityEnabled())
return;
- String serviceName = "host/" + remoteHost.getHost();
+ String serviceName = KerberosUtil.getServicePrincipal("host",
+ remoteHost.getHost());
if (LOG.isDebugEnabled())
LOG.debug("Fetching service ticket for host at: " + serviceName);
Object serviceCred = null;