[
https://issues.apache.org/jira/browse/MAPREDUCE-1532?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Devaraj Das updated MAPREDUCE-1532:
-----------------------------------
Attachment: 1532-bp20.1.patch
This is a patch for Y20. The changes:
1) The JobClient and the Job constructors cache the UserGroupInformation. That
UGI is used for getting the FileSystem in the JobClient and the Job classes.
2) The DelegationTokenRenewal is changed a bit. It now maintains a list of
delegation tokens as opposed to a map from JobID to the tokens. This is
required to support the Oozie use case better. Otherwise, we will have
duplicate tokens for those cases where a task of one job launches another job.
That second job uses the same tokens.
> Delegation token is obtained as the superuser
> ---------------------------------------------
>
> Key: MAPREDUCE-1532
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-1532
> Project: Hadoop Map/Reduce
> Issue Type: Bug
> Components: job submission, security
> Affects Versions: 0.22.0
> Reporter: Devaraj Das
> Assignee: Devaraj Das
> Fix For: 0.22.0
>
> Attachments: 1532-bp20.1.patch
>
>
> When the UserGroupInformation.doAs is invoked for proxy users, the delegation
> token is incorrectly obtained as the real user.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
