[
https://issues.apache.org/jira/browse/MAPREDUCE-1550?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Devaraj Das updated MAPREDUCE-1550:
-----------------------------------
Attachment: 1550-1.patch
This fixes the problem. The problem is that, in a secure env, the
FileSystem.get() would require user's credentials to talk to the NameNode if
the get() was done within a UGI.doAs. Removing the doAs would mean that the
JobTracker's credentials would be used which is the right thing to do since the
JobHistory files are owned by the JobTracker anyway..
> UGI.doAs should not be used for getting the history file of jobs
> ----------------------------------------------------------------
>
> Key: MAPREDUCE-1550
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-1550
> Project: Hadoop Map/Reduce
> Issue Type: Bug
> Components: jobtracker
> Affects Versions: 0.22.0
> Reporter: Devaraj Das
> Fix For: 0.22.0
>
> Attachments: 1550-1.patch
>
>
> When the jobtracker tries to open a job history file it does a doAs to get
> the filesystem for the user (that had submitted the job). This should not be
> done since the job history files are owned by the jobtracker.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
