[ 
https://issues.apache.org/jira/browse/HDFS-7984?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15033190#comment-15033190
 ] 

HeeSoo Kim commented on HDFS-7984:
----------------------------------

If you run the command on user account2, you should use HADOOP_CLIENT_OPTS 
parameter.
on user account2:
{noformat}
HADOOP_CLIENT_OPTS="${HADOOP_CLIENT_OPTS} -Dhadoop.token.files=/tmp/token" 
hadoop fs -ls /user/account1
{noformat}

When you use the {{-Dproperty=value}} pattern, the property should be mention 
before the java command.
{noformat}
hadoop fs -Dhadoop.token.files=/tmp/token -ls /user/account1
{noformat}
If you use the above command, the property of {{sun.java.command}} has the 
{{-Dhadoop.token.files}} property as a value.
{noformat}
sun.java.command=org.apache.hadoop.fs.FsShell  -Dhadoop.token.files=/tmp/token 
-ls /user/account1
{noformat}

> webhdfs:// needs to support provided delegation tokens
> ------------------------------------------------------
>
>                 Key: HDFS-7984
>                 URL: https://issues.apache.org/jira/browse/HDFS-7984
>             Project: Hadoop HDFS
>          Issue Type: Bug
>          Components: webhdfs
>    Affects Versions: 3.0.0
>            Reporter: Allen Wittenauer
>            Assignee: HeeSoo Kim
>            Priority: Blocker
>         Attachments: HDFS-7984.001.patch, HDFS-7984.002.patch, 
> HDFS-7984.003.patch, HDFS-7984.004.patch, HDFS-7984.005.patch, 
> HDFS-7984.006.patch, HDFS-7984.007.patch, HDFS-7984.patch
>
>
> When using the webhdfs:// filesystem (especially from distcp), we need the 
> ability to inject a delegation token rather than webhdfs initialize its own.  
> This would allow for cross-authentication-zone file system accesses.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to