[
https://issues.apache.org/jira/browse/HADOOP-11825?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14645253#comment-14645253
]
Steve Loughran commented on HADOOP-11825:
-----------------------------------------
Happy for you to start.
I've been talking classpaths with [~wheat9], having a lean
hadoop-common-rest-client JAR would
# keep jersey client dependencies out of hadoop-common (i.e. stop it adding
more things)
# allow the JAR to stay ultra lean, depending only on hadoop-auth & jersey.
Ideally: not even jackson. Users who want JSON support can choose their own
version of jackson
> Move timelineclient Jersey+Kerberos+UGI support into a public implementation
> ----------------------------------------------------------------------------
>
> Key: HADOOP-11825
> URL: https://issues.apache.org/jira/browse/HADOOP-11825
> Project: Hadoop Common
> Issue Type: Improvement
> Components: net
> Affects Versions: 2.7.0
> Reporter: Steve Loughran
> Original Estimate: 4h
> Remaining Estimate: 4h
>
> Having a SPNEGO authed Jersey REST client is a pre-requisite for REST
> operations against YARN applications and any other services in the Hadoop
> cluster which use Kerberos to auth, from code that uses UGI to manage
> identity.
> There's a multiple implementations of UGI+Http bindings in the code, with
> {{org.apache.hadoop.yarn.client.api.impl.TimelineClientImpl}} being the one
> which provides Jersey client integration, and:
> # retry
> # delegation tokens
> # {{doAs()}} support
> It does all of this intermixed with the rest of the code, and is tagged as
> private.
> I propose pulling the jersey support out into a hadoop common .net class,
> tagging as public+evolving, to act as the foundation for any app that needs
> to use UGI+SPNEGO with jersey
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
