[
https://issues.apache.org/jira/browse/HADOOP-12787?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15143745#comment-15143745
]
Jitendra Nath Pandey commented on HADOOP-12787:
-----------------------------------------------
[~xyao], thanks for the patch. I have one suggestion:
{{public DFSClient(URI nameNodeUri, Configuration conf, boolean proxyUser)}}
Instead of passing a boolean, please pass the ugi. The WebHdfsHandler should
have the logic to construct the right UGI.
This will make the constructor more generic.
> KMS SPNEGO sequence does not work with WEBHDFS
> ----------------------------------------------
>
> Key: HADOOP-12787
> URL: https://issues.apache.org/jira/browse/HADOOP-12787
> Project: Hadoop Common
> Issue Type: Bug
> Components: kms, security
> Affects Versions: 2.6.3
> Reporter: Xiaoyu Yao
> Assignee: Xiaoyu Yao
> Attachments: HADOOP-12878.00.patch
>
>
> This was a follow up of my
> [comments|https://issues.apache.org/jira/browse/HADOOP-12559?focusedCommentId=15059045&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15059045]
> for HADOOP-10698.
> It blocks a delegation token based user (MR) using WEBHDFS to access KMS
> server for encrypted files. This might work in many cases before as JDK 7 has
> been aggressively do SPENGO implicitly. However, this is not the case in JDK
> 8 as we have seen many failures when using WEBHDFS with KMS and HDFS
> encryption zone.
>
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
