[
https://issues.apache.org/jira/browse/HADOOP-16001?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16723204#comment-16723204
]
Íñigo Goiri commented on HADOOP-16001:
--------------------------------------
Is the unit test already covering this?
Not very familiar with {{KerberosName}} but it looks like it provides more
functionality than just taking the part before the @.
> ZKDelegationTokenSecretManager should use KerberosName#getShortName to get
> the user name for ZK ACL
> ---------------------------------------------------------------------------------------------------
>
> Key: HADOOP-16001
> URL: https://issues.apache.org/jira/browse/HADOOP-16001
> Project: Hadoop Common
> Issue Type: Bug
> Reporter: Shubham Dewan
> Assignee: Shubham Dewan
> Priority: Blocker
> Attachments: HDFS-14136.001.patch, image-2018-12-10-17-54-33-361.png
>
>
> !image-2018-12-10-17-54-33-361.png!
> ZKDelegationTokenSecretManager use only first part of principal to set the
> znode ACL's.
> We can use *{{KerberosName#getShortName()}}* method for getting the principal
> based upon rules configured in *{{hadoop.security.auth_to_local}}* and
> setting the ACL.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
