[
https://issues.apache.org/jira/browse/HDFS-3553?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13398991#comment-13398991
]
Kihwal Lee commented on HDFS-3553:
----------------------------------
WebHDFS is a bit different from Hftp in that users can directly interact with
it using tools such as curl. The HTTP user in the request is naturally the
actual user who is running the tool and proxy request will be something
special. So, the current way feels more natural than what's proposed in #1 when
it comes to direct user interactions.
In Hftp, since HTTP requests are made only programmatically, wrapping a request
in doAs seems consistent with the rest of the system. The fact that HTTP user =
currentUser doesn't affect the usability, as it's all hidden from users.
#1 can be added to v2 of WebHDFS, but we will have to maintain compatibility
for a version or two, so JspHelper will become perhaps even more messier than
#2.
Since this inconsistency fortunately does not cause any confusion to users, we
should probably go with #2. We will get the better usability (maybe) and the
compatibility at the price of some inconsistency/complexity in the code. How
about doing #2 and leaving a block of well-written comment in the code? :)
> Hftp proxy tokens are broken
> ----------------------------
>
> Key: HDFS-3553
> URL: https://issues.apache.org/jira/browse/HDFS-3553
> Project: Hadoop HDFS
> Issue Type: Bug
> Affects Versions: 1.0.2, 2.0.0-alpha, 3.0.0
> Reporter: Daryn Sharp
> Assignee: Daryn Sharp
> Priority: Blocker
> Attachments: HDFS-3553.branch-1.0.patch
>
>
> Proxy tokens are broken for hftp. The impact is systems using proxy tokens,
> such as oozie jobs, cannot use hftp.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
