[ 
https://issues.apache.org/jira/browse/HADOOP-19958?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18103583#comment-18103583
 ] 

ASF GitHub Bot commented on HADOOP-19958:
-----------------------------------------

smengcl opened a new pull request, #8669:
URL: https://github.com/apache/hadoop/pull/8669

   ### Description of PR\n\nJira: 
[HADOOP-19958](https://issues.apache.org/jira/browse/HADOOP-19958)\n\nParent 
Jira: 
[HADOOP-11890](https://issues.apache.org/jira/browse/HADOOP-11890)\n\nDelegation
 token services use . This representation is ambiguous when the host is an IPv6 
literal.\n\nThis change:\n\n- adds a shared  helper that formats IPv6 addresses 
as ;\n- accepts bracketed IPv6 authorities when creating socket addresses;\n- 
uses the shared format for delegation token services in both token-service 
modes;\n- verifies token service round trips when  is  or ;\n- rejects 
ambiguous unbracketed IPv6 authorities; and\n- preserves existing DNS and IPv4 
behavior.\n\n### How was this patch tested?\n\n- \n- Result: 76 tests passed 
with no failures, errors, or skips.\n- \n\n### For code changes:\n\n- [x] Does 
the title of this PR start with the corresponding JIRA issue id\n      (e.g. 
'HADOOP-17799. Your PR title ...')?\n- [ ] Object storage: Have the integration 
tests been executed and the endpoint\n      declared according to the 
connector-specific documentation? *Note: Automated CI\n      testing doesn't 
cover all cases so manual testing with cloud storage is still\n      required.* 
Not applicable to this change.\n- [x] If adding new dependencies to the code, 
are these dependencies licensed in a way that is compatible for inclusion\n     
 under [ASF 2.0](http://www.apache.org/legal/resolved.html#category-a)? No new 
dependencies are added.\n- [x] If applicable, have you updated the , ,  
files?\n      No license or notice changes are required.\n\n### AI 
Tooling\n\nContains content generated by Codex.\n\nIf an AI tool was used:\n\n- 
[x] The PR includes the phrase "Contains content generated by <tool>"\n      
where <tool> is the name of the AI tool used.\n- [x] My use of AI contributions 
follows the ASF legal policy\n      
https://www.apache.org/legal/generative-tooling.html




> Support IPv6 delegation token service addresses
> -----------------------------------------------
>
>                 Key: HADOOP-19958
>                 URL: https://issues.apache.org/jira/browse/HADOOP-19958
>             Project: Hadoop Common
>          Issue Type: Sub-task
>            Reporter: Siyao Meng
>            Priority: Major
>
> Hadoop formats delegation token services as host:port. This format is 
> ambiguous for IPv6 literals. Update NetUtils and SecurityUtil to use 
> bracketed IPv6 authorities. Verify round trips with 
> hadoop.security.token.service.use_ip set to true and false. Reject ambiguous 
> unbracketed IPv6 authorities.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to