[
https://issues.apache.org/jira/browse/HDFS-3001?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13223607#comment-13223607
]
patrick white commented on HDFS-3001:
-------------------------------------
Thanks for the feedback and good point, this might be the case. John was
working to reproduce this but did not see the issue, we checked to confirm that
i was running as a privileged user. I was, however the environment has a Kerb
user translation rule in the site config's 'hadoop.security.auth_to_local'
setting which remaps the running userid, this is likely the cause for the
issue. Trying to get some bandwidth in order to confirm.
> dfsadmin -refreshServiceAcl fails Kerb authentication with valid Kerb ticket,
> other subcommands succeed
> -------------------------------------------------------------------------------------------------------
>
> Key: HDFS-3001
> URL: https://issues.apache.org/jira/browse/HDFS-3001
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: hdfs client
> Affects Versions: 0.23.1
> Reporter: patrick white
> Assignee: John George
>
> With a valid hdfs kerberos ticket, the dfsadmin subcommand
> '-refreshServiceAcl' still fails on Kerb authentication. Please see the
> comment for more details.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
