[ 
https://issues.apache.org/jira/browse/HADOOP-8459?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13286922#comment-13286922
 ] 

Daryn Sharp commented on HADOOP-8459:
-------------------------------------

To elaborate: consider the case of the client gets a token from "httpfs.domain" 
which is a CNAME to "host1234.domain".  The server can't know the host name the 
client used, so it would stamp "host1234.domain" into the token.  When the 
client tries to re-establish a connection to "httpfs.domain" it won't find a 
token with that hostname, hence why the client is responsible for setting the 
service.
                
> make SecurityUtil.setTokenServiceUseIp method public
> ----------------------------------------------------
>
>                 Key: HADOOP-8459
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8459
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 2.0.1-alpha
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 2.0.1-alpha
>
>         Attachments: HADOOP-8459.patch
>
>
> Changing the scope of this method to be able to use it for HttpFS delegation 
> token support HDFS-3113

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to