[
https://issues.apache.org/jira/browse/STORM-346?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14059228#comment-14059228
]
ASF GitHub Bot commented on STORM-346:
--------------------------------------
GitHub user Parth-Brahmbhatt opened a pull request:
https://github.com/apache/incubator-storm/pull/190
STORM-346: added AutoHDFS class that will get hdfs delegation tokens on
behalf of users, push it to workers and renew the delegation tokens
automatically.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/Parth-Brahmbhatt/incubator-storm STORM-346
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/incubator-storm/pull/190.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #190
----
commit 3c6930dfe4447b6077916b9f9a07b062141b5305
Author: Parth Brahmbhatt <[email protected]>
Date: 2014-07-07T18:36:49Z
AutoHDFS for getting HDFS delegation token and auto renew.
commit 00e80e9a132764d4b73737d2f7a52282e5247856
Author: Parth Brahmbhatt <[email protected]>
Date: 2014-07-07T18:43:59Z
Merge remote-tracking branch 'upstream/security' into security
commit e04c37356c96d9851c00542c739d053e4bf36481
Author: Parth Brahmbhatt <[email protected]>
Date: 2014-07-07T18:49:42Z
Revert "AutoHDFS for getting HDFS delegation token and auto renew."
This reverts commit 3c6930dfe4447b6077916b9f9a07b062141b5305.
commit 1094762bf9c3ae339500a3a4500d742367c33e63
Author: Parth Brahmbhatt <[email protected]>
Date: 2014-07-11T18:50:07Z
STORM-346: added AutoHDFS class that will get hdfs delegation tokens on
behalf of users, push it to workers and renew the delegation tokens
automatically.
----
> (Security) Oozie style delegation tokens for HDFS/HBase
> -------------------------------------------------------
>
> Key: STORM-346
> URL: https://issues.apache.org/jira/browse/STORM-346
> Project: Apache Storm (Incubating)
> Issue Type: Bug
> Reporter: Robert Joseph Evans
> Assignee: Parth Brahmbhatt
> Labels: security
>
> Oozie has the ability to fetch delegation tokens on behalf of other users by
> running as a super user that can become a proxy user for almost anyone else.
> We should build one or more classes similar to AutoTGT that can fetch a
> delegation token for HDFS/HBase, renew the token if needed, and then once the
> token is about to permanently expire fetch a new one.
> According to some people I have talked with HBase may need to have a JIRA
> filed against it so that it can pick up a new delegation token without
> needing to restart the process.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
