[ 
https://issues.apache.org/jira/browse/HDFS-12052?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16245268#comment-16245268
 ] 

Zoran Dimitrijevic commented on HDFS-12052:
-------------------------------------------

Sure. But I think it was exactly the same fix as for 3+. I did it for
Altiscale 2.7+ branch. What do you want me to do?




> Set SWEBHDFS delegation token kind when ssl is enabled in HttpFS
> ----------------------------------------------------------------
>
>                 Key: HDFS-12052
>                 URL: https://issues.apache.org/jira/browse/HDFS-12052
>             Project: Hadoop HDFS
>          Issue Type: Bug
>          Components: httpfs, webhdfs
>    Affects Versions: 2.7.3, 3.0.0-alpha3
>            Reporter: Zoran Dimitrijevic
>            Assignee: Zoran Dimitrijevic
>             Fix For: 3.0.0-beta1
>
>         Attachments: HDFS-12052.00.patch, HDFS-12052.01.patch, 
> HDFS-12052.02.patch, HDFS-12052.03.patch, HDFS-12052.04.patch, 
> HDFS-12052.05.patch, HDFS-12052.06.patch, HDFS-12052.07.patch
>
>
> When httpfs runs with httpfs.ssl.enabled it should return SWEBHDFS delegation 
> tokens. 
> Currently, httpfs returns WEBHDFS delegation "kind" for tokens regardless of 
> whether ssl is enabled or not. If clients directly connect to renew tokens 
> (for example, hdfs dfs) all works because httpfs doesn't check whether token 
> kind is for swebhdfs or webhdfs. However, this breaks when yarn rm needs to 
> renew the token for the job (for example, when running hadoop distcp). Since 
> DT kind is WEBHDFS, rm tries to establish non-ssl connection to httpfs and 
> fails.
> I've tested a simple patch which I'll upload to this jira, and it fixes this 
> issue (hadoop distcp works).



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org

Reply via email to