[
https://issues.apache.org/jira/browse/NIFI-4323?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16309888#comment-16309888
]
ASF subversion and git services commented on NIFI-4323:
-------------------------------------------------------
Commit 42a1ee011b683da06011a946cbacaf0e8d3b2c81 in nifi's branch
refs/heads/master from [~jtstorck]
[ https://git-wip-us.apache.org/repos/asf?p=nifi.git;h=42a1ee0 ]
NIFI-4323 This closes #2360. Wrapped Get/ListHDFS hadoop operations in ugi.doAs
calls
NIFI-3472 NIFI-4350 Removed explicit relogin code from HDFS/Hive/HBase
components and updated SecurityUtils.loginKerberos to use
UGI.loginUserFromKeytab. This brings those components in line with
daemon-process-style usage, made possible by NiFi's InstanceClassloader
isolation. Relogin (on ticket expiry/connection failure) can now be properly
handled by hadoop-client code implicitly.
NIFI-3472 Added default value (true) for
javax.security.auth.useSubjectCredsOnly to bootstrap.conf
NIFI-3472 Added javadoc explaining the removal of explicit relogin threads and
usage of UGI.loginUserFromKeytab
Readded Relogin Period property to AbstractHadoopProcessor, and updated its
documentation to indicate that it is now a deprecated property
Additional cleanup of code that referenced relogin periods
Marked KerberosTicketRenewer is deprecated
NIFI-3472 Cleaned up imports in TestPutHiveStreaming
> Get/List/DeleteHDFS processors should use UGI.doAs when invoking HDFS
> operations
> --------------------------------------------------------------------------------
>
> Key: NIFI-4323
> URL: https://issues.apache.org/jira/browse/NIFI-4323
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Extensions
> Affects Versions: 1.3.0
> Reporter: Jeff Storck
> Assignee: Jeff Storck
>
> While the Get/List/DeleteHDFS processors are working without wrapping HDFS
> operations in UGI.doAs calls, for best practice, those operations should be
> performed as PrivilegedExceptionActions supplied to the UGI.doAs method.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
