[
https://issues.apache.org/jira/browse/NIFI-4323?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16308639#comment-16308639
]
ASF GitHub Bot commented on NIFI-4323:
--------------------------------------
Github user jtstorck commented on the issue:
https://github.com/apache/nifi/pull/2360
@jomach Anything that uses org.apache.hadoop.ipc.Client should handle
implicit relogin, through a method that handles connection failures:
org.apache.hadoop.ipc.Client.handleSaslConnectionFailure, which resides in
hadoop-common.
org.apache.hadoop.hdfs.DistributedFileSystem, in hadoop-hdfs, uses the
Client to connect to HDFS. If any failure occurs when making the connection,
the first thing it does is use UGI to relogin. With the knowledge of this, all
the explicit NiFi relogin logic has been removed in this PR.
> Get/List/DeleteHDFS processors should use UGI.doAs when invoking HDFS
> operations
> --------------------------------------------------------------------------------
>
> Key: NIFI-4323
> URL: https://issues.apache.org/jira/browse/NIFI-4323
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Extensions
> Affects Versions: 1.3.0
> Reporter: Jeff Storck
> Assignee: Jeff Storck
>
> While the Get/List/DeleteHDFS processors are working without wrapping HDFS
> operations in UGI.doAs calls, for best practice, those operations should be
> performed as PrivilegedExceptionActions supplied to the UGI.doAs method.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
