[
https://issues.apache.org/jira/browse/NIFI-2435?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15407876#comment-15407876
]
ASF GitHub Bot commented on NIFI-2435:
--------------------------------------
Github user brosander closed the pull request at:
https://github.com/apache/nifi/pull/787
> GetHDFSSequenceFile sequence reader throwing away authenticated filesystem
> and creating its own
> -----------------------------------------------------------------------------------------------
>
> Key: NIFI-2435
> URL: https://issues.apache.org/jira/browse/NIFI-2435
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core Framework
> Affects Versions: 0.6.1
> Environment: Kerberos HDFS
> Reporter: Juan Sequeiros
> Assignee: Bryan Rosander
> Labels: hdfs, kerberos
>
> Hadoop Kerberos has a way of accessing things as an authenticated user
> UserGroupInformation.doAs
> NIFI is doing that to get access to the filesystem in order to basically
> tell hadoop to use the correct credentials so our processor does that
> correctly and then passes the results into the sequence reader unfortunately,
> the sequence reader then throws away our authenticated filesystem and creates
> its own without wrapping in a UGI.doAs
> More context:
> The constructor used for org.apache.hadoop.io.SequenceFile.Reader in both
> KeyValueReader and ValueReader is deprecated and has been turned into a
> callthrough that only uses the passed in FileSystem to get the qualified
> path[1]. I've modified those classes to do that logic and then wrapped the
> callsite in the processor in a UGI.doAs if it is configured to use a UGI
> [1]:
> https://github.com/apache/hadoop/commit/0c462b223f151208ff7bd5148cee0e436c23d795#diff-e70823f17863445da52875999e4b19a2L1592
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
