[
https://issues.apache.org/jira/browse/HADOOP-7070?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12974379#action_12974379
]
Todd Lipcon commented on HADOOP-7070:
-------------------------------------
Hi Owen. I don't think there is any real way to hook into unloading here -
there is no "static finalizer" concept, and I also don't know enough about J2EE
to know if there are any other hooks available.
The patch here addresses a critical bug and is simple. If we run into problems
with unloading in the future we can address that separately?
> JAAS configuration should delegate unknown application names to pre-existing
> configuration
> ------------------------------------------------------------------------------------------
>
> Key: HADOOP-7070
> URL: https://issues.apache.org/jira/browse/HADOOP-7070
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.22.0, 0.23.0
> Reporter: Todd Lipcon
> Assignee: Todd Lipcon
> Priority: Critical
> Attachments: hadoop-7070.txt, hadoop-7070.txt
>
>
> As reported here: https://issues.cloudera.org/browse/DISTRO-66 it is
> impossible to use secured Hadoop inside an application that relies on other
> JAAS configurations. This is because the static initializer of
> UserGroupInformation replaces the JAAS configuration, but we don't delegate
> unknown applications up to whatever Configuration was installed previously.
> The delegation technique seems to be used by JBoss's XMLLoginConfigImpl for
> example.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
