[
https://issues.apache.org/jira/browse/HADOOP-10215?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jing Zhao updated HADOOP-10215:
-------------------------------
Attachment: HADOOP-10215.000.patch
Looks like we only need to check if the current user is a proxy user before
getting a delegation token. If yes, we should use the real user. Upload a
simple patch to fix.
> Cannot create hftp filesystem when using a proxy user ugi and a doAs on a
> secure cluster
> ----------------------------------------------------------------------------------------
>
> Key: HADOOP-10215
> URL: https://issues.apache.org/jira/browse/HADOOP-10215
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 2.2.0
> Reporter: Arpit Gupta
> Assignee: Jing Zhao
> Attachments: HADOOP-10215.000.patch
>
>
> Noticed this while debugging issues in another application. We saw an error
> when trying to do a FileSystem.get using an hftp file system on a secure
> cluster using a proxy user ugi.
> This is a small snippet used
> {code}
> FileSystem testFS = ugi.doAs(new PrivilegedExceptionAction<FileSystem>() {
> @Override
> public FileSystem run() throws IOException {
> return FileSystem.get(hadoopConf);
> }
> });
> {code}
> The same code worked for hdfs and webhdfs but not for hftp when the ugi used
> was UserGroupInformation.createProxyUser
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
