[
https://issues.apache.org/jira/browse/HADOOP-6988?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12919082#action_12919082
]
Aaron T. Myers commented on HADOOP-6988:
----------------------------------------
Even if it's not intended for job submission, it's documented as being the
preferred way to pass token files to bin/hadoop for the purpose of running HDFS
commands.
>From the HDFS user guide:
{quote}
The HDFS fetchdt command is not a Hadoop shell command. It can be run as
'bin/hadoop fetchdt DTfile'. After you got the token you can run an HDFS
command without having Kerberos tickets, by pointing HADOOP_TOKEN_FILE_LOCATION
environmental variable to the delegation token file.
{quote}
Thus, this change could be useful for any HDFS command which is capable of
communicating with multiple distinct NNs.
> Add support for reading multiple hadoop delegation token files
> --------------------------------------------------------------
>
> Key: HADOOP-6988
> URL: https://issues.apache.org/jira/browse/HADOOP-6988
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.22.0
> Reporter: Aaron T. Myers
> Assignee: Aaron T. Myers
> Attachments: hadoop-6988.0.txt, hadoop-6988.1.txt
>
>
> It would be nice if there were a way to specify multiple delegation token
> files via the HADOOP_TOKEN_FILE_LOCATION environment variable and the
> "mapreduce.job.credentials.binary" configuration value. I suggest a
> colon-separated list of paths, each of which is read as a separate delegation
> token file.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
