[jira] [Commented] (HADOOP-18618) Support custom property for credential provider path

[ https://issues.apache.org/jira/browse/HADOOP-18618?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17684972#comment-17684972 ] Larry McCay commented on HADOOP-18618: -- Yes, this is a tricky area and in practice

[jira] [Commented] (HADOOP-18235) vulnerability: we may leak sensitive information in LocalKeyStoreProvider

[ https://issues.apache.org/jira/browse/HADOOP-18235?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17615991#comment-17615991 ] Larry McCay commented on HADOOP-18235: -- [~clayb] - I do not recall what the issue

[jira] [Commented] (HADOOP-18235) vulnerability: we may leak sensitive information in LocalKeyStoreProvider

[ https://issues.apache.org/jira/browse/HADOOP-18235?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17615271#comment-17615271 ] Larry McCay commented on HADOOP-18235: -- [~clayb] - thanks for the PR here! I added

[jira] [Updated] (HADOOP-18388) Allow dynamic groupSearchFilter in LdapGroupsMapping

[ https://issues.apache.org/jira/browse/HADOOP-18388?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated HADOOP-18388: - Labels: Reviewed pull-request-available (was: pull-request-available) > Allow dynamic groupSea

[jira] [Assigned] (HADOOP-18388) Allow dynamic groupSearchFilter in LdapGroupsMapping

[ https://issues.apache.org/jira/browse/HADOOP-18388?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay reassigned HADOOP-18388: Assignee: Ayush Saxena > Allow dynamic groupSearchFilter in LdapGroupsMapping >

[jira] [Commented] (HADOOP-18388) Allow dynamic groupSearchFilter in LdapGroupsMapping

[ https://issues.apache.org/jira/browse/HADOOP-18388?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17583753#comment-17583753 ] Larry McCay commented on HADOOP-18388: -- [~ayushtkn] - thank you for the patch. I'd

[jira] [Commented] (HADOOP-18388) Allow dynamic groupSearchFilter in LdapGroupsMapping

[ https://issues.apache.org/jira/browse/HADOOP-18388?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17581189#comment-17581189 ] Larry McCay commented on HADOOP-18388: -- [~ayushtkn] - have you a change in mind he

[jira] [Updated] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated HADOOP-18074: - Labels: Reviewed pull-request-available (was: pull-request-available) > Partial/Incomplete gro

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17565139#comment-17565139 ] Larry McCay commented on HADOOP-18074: -- [~ste...@apache.org] - I haven't done the

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17565128#comment-17565128 ] Larry McCay commented on HADOOP-18074: -- Oh, okay, I can do it then. The contributi

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17565107#comment-17565107 ] Larry McCay commented on HADOOP-18074: -- [~ste...@apache.org] - I have addressed yo

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17558811#comment-17558811 ] Larry McCay commented on HADOOP-18074: -- https://github.com/apache/hadoop/pull/4503

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17558804#comment-17558804 ] Larry McCay commented on HADOOP-18074: -- There appears to be a couple problems in t

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17558790#comment-17558790 ] Larry McCay commented on HADOOP-18074: -- [~ste...@apache.org] - being that this is

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17557139#comment-17557139 ] Larry McCay commented on HADOOP-18074: -- [~ste...@apache.org] - I've set Target Ver

[jira] [Assigned] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay reassigned HADOOP-18074: Target Version/s: 3.3.4 Assignee: Larry McCay > Partial/Incomplete groups li

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17557064#comment-17557064 ] Larry McCay commented on HADOOP-18074: -- [~ste...@apache.org] - I do believe there

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17556554#comment-17556554 ] Larry McCay commented on HADOOP-18074: -- [~ste...@apache.org] - I'd like to get thi

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17472156#comment-17472156 ] Larry McCay commented on HADOOP-18074: -- Hi [~planoe] - do you plan to submit a PR

[jira] [Commented] (HADOOP-18030) Authentication cookie will never expire by default after HADOOP-12049

[ https://issues.apache.org/jira/browse/HADOOP-18030?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17454189#comment-17454189 ] Larry McCay commented on HADOOP-18030: -- Hi [~lalapala] - let's see how to unpack t

[jira] [Commented] (HADOOP-18030) Authentication cookie will never expire by default after HADOOP-12049

[ https://issues.apache.org/jira/browse/HADOOP-18030?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17453153#comment-17453153 ] Larry McCay commented on HADOOP-18030: -- [~lalapala] - i'm sorry, can you provide m

[jira] [Commented] (HADOOP-18030) Authentication cookie will never expire by default after HADOOP-12049

[ https://issues.apache.org/jira/browse/HADOOP-18030?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17452569#comment-17452569 ] Larry McCay commented on HADOOP-18030: -- [~lalapala] - this JIRA seems to articulat

[jira] [Deleted] (HADOOP-16736) Best Big data hadoop training in pune

[ https://issues.apache.org/jira/browse/HADOOP-16736?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay deleted HADOOP-16736: - > Best Big data hadoop training in pune > - > >

[jira] [Resolved] (HADOOP-16736) Best Big data hadoop training in pune

[ https://issues.apache.org/jira/browse/HADOOP-16736?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay resolved HADOOP-16736. -- Resolution: Invalid This is spam - resolving as Invalid. > Best Big data hadoop training in

[jira] [Commented] (HADOOP-16340) ABFS driver continues to retry on IOException responses from REST operations

[ https://issues.apache.org/jira/browse/HADOOP-16340?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16867688#comment-16867688 ] Larry McCay commented on HADOOP-16340: -- [~ste...@apache.org] , [~DanielZhou] - Whe

[jira] [Commented] (HADOOP-16287) KerberosAuthenticationHandler Trusted Proxy Support for Knox

[ https://issues.apache.org/jira/browse/HADOOP-16287?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16841753#comment-16841753 ] Larry McCay commented on HADOOP-16287: -- [~daryn] - I see no difference between wha

[jira] [Commented] (HADOOP-16105) WASB in secure mode does not set connectingUsingSAS

[ https://issues.apache.org/jira/browse/HADOOP-16105?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16773373#comment-16773373 ] Larry McCay commented on HADOOP-16105: -- [~ste...@apache.org] - This looks straight

[jira] [Commented] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16760031#comment-16760031 ] Larry McCay commented on HADOOP-16076: -- [~eyang] - internal testing seems to be go

[jira] [Commented] (HADOOP-16079) Token.toString faulting if any token listed can't load.

[ https://issues.apache.org/jira/browse/HADOOP-16079?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16757562#comment-16757562 ] Larry McCay commented on HADOOP-16079: -- [~ste...@apache.org] - this seems an appro

[jira] [Updated] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated HADOOP-16076: - Attachment: HADOOP-16076-01.patch > SPNEGO+SSL Client Connections with HttpClient Broken >

[jira] [Updated] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated HADOOP-16076: - Status: Patch Available (was: Open) > SPNEGO+SSL Client Connections with HttpClient Broken > -

[jira] [Updated] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated HADOOP-16076: - Attachment: (was: HADOOP-16076-01.patch) > SPNEGO+SSL Client Connections with HttpClient Br

[jira] [Commented] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16754333#comment-16754333 ] Larry McCay commented on HADOOP-16076: -- [~eyang] - yes, I created the patch from t

[jira] [Updated] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated HADOOP-16076: - Status: Open (was: Patch Available) > SPNEGO+SSL Client Connections with HttpClient Broken > -

[jira] [Updated] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated HADOOP-16076: - Status: Patch Available (was: Open) > SPNEGO+SSL Client Connections with HttpClient Broken > -

[jira] [Updated] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated HADOOP-16076: - Attachment: HADOOP-16076-01.patch > SPNEGO+SSL Client Connections with HttpClient Broken >

[jira] [Commented] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16753543#comment-16753543 ] Larry McCay commented on HADOOP-16076: -- [~ste...@apache.org] - will do. > SPNEGO+

[jira] [Commented] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16753104#comment-16753104 ] Larry McCay commented on HADOOP-16076: -- Knox has been using: 4.5.6

[jira] [Created] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

Larry McCay created HADOOP-16076: Summary: SPNEGO+SSL Client Connections with HttpClient Broken Key: HADOOP-16076 URL: https://issues.apache.org/jira/browse/HADOOP-16076 Project: Hadoop Common

[jira] [Commented] (HADOOP-16064) Load configuration values from external sources

[ https://issues.apache.org/jira/browse/HADOOP-16064?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16752582#comment-16752582 ] Larry McCay commented on HADOOP-16064: -- Thanks for pointing me to this [~ste...@ap

[jira] [Commented] (HADOOP-15996) Plugin interface to support more complex usernames in Hadoop

[ https://issues.apache.org/jira/browse/HADOOP-15996?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16737291#comment-16737291 ] Larry McCay commented on HADOOP-15996: -- [~daryn] - welcome back and Happy New Year

[jira] [Commented] (HADOOP-14556) S3A to support Delegation Tokens

[ https://issues.apache.org/jira/browse/HADOOP-14556?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16735247#comment-16735247 ] Larry McCay commented on HADOOP-14556: -- Thanks for the insights and changes, [~ste

[jira] [Commented] (HADOOP-15996) Plugin interface to support more complex usernames in Hadoop

[ https://issues.apache.org/jira/browse/HADOOP-15996?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16732216#comment-16732216 ] Larry McCay commented on HADOOP-15996: -- Patch 12 looks good to me as well.  Here

[jira] [Commented] (HADOOP-14556) S3A to support Delegation Tokens

[ https://issues.apache.org/jira/browse/HADOOP-14556?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16731063#comment-16731063 ] Larry McCay commented on HADOOP-14556: -- Hi [~ste...@apache.org] - I have finally g

[jira] [Commented] (HADOOP-15996) Plugin interface to support more complex usernames in Hadoop

[ https://issues.apache.org/jira/browse/HADOOP-15996?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16730851#comment-16730851 ] Larry McCay commented on HADOOP-15996: -- It seems the patch is still using "legacy"

[jira] [Commented] (HADOOP-15996) Plugin interface to support more complex usernames in Hadoop

[ https://issues.apache.org/jira/browse/HADOOP-15996?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16730452#comment-16730452 ] Larry McCay commented on HADOOP-15996: -- [~bolke] - then make the names be what the

[jira] [Commented] (HADOOP-15996) Plugin interface to support more complex usernames in Hadoop

[ https://issues.apache.org/jira/browse/HADOOP-15996?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16729855#comment-16729855 ] Larry McCay commented on HADOOP-15996: -- I don't understand the explanation of the

[jira] [Commented] (HADOOP-15996) Plugin interface to support more complex usernames in Hadoop

[ https://issues.apache.org/jira/browse/HADOOP-15996?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16725380#comment-16725380 ] Larry McCay commented on HADOOP-15996: -- [~bolke] - I can certainly see this being

[jira] [Commented] (HADOOP-15995) Add ldap.bind.password.alias in LdapGroupsMapping to distinguish aliases when using multiple providers through CompositeGroupsMapping

[ https://issues.apache.org/jira/browse/HADOOP-15995?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16718323#comment-16718323 ] Larry McCay commented on HADOOP-15995: -- Assuming that testConfGetPassword provides

[jira] [Commented] (HADOOP-15808) Harden Token service loader use

[ https://issues.apache.org/jira/browse/HADOOP-15808?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16717616#comment-16717616 ] Larry McCay commented on HADOOP-15808: -- Okay, very good, [~ste...@apache.org]. +1

[jira] [Commented] (HADOOP-15995) LdapGroupsMapping should use the bind.password config value as credential alias

[ https://issues.apache.org/jira/browse/HADOOP-15995?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16715577#comment-16715577 ] Larry McCay commented on HADOOP-15995: -- +1 - that sounds better. > LdapGroupsMapp

[jira] [Commented] (HADOOP-15995) LdapGroupsMapping should use the bind.password config value as credential alias

[ https://issues.apache.org/jira/browse/HADOOP-15995?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16715548#comment-16715548 ] Larry McCay commented on HADOOP-15995: -- Hi [~lukmajercak] - can you explain why th

[jira] [Commented] (HADOOP-15995) LdapGroupsMapping should use the bind.password config value as credential alias

[ https://issues.apache.org/jira/browse/HADOOP-15995?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16715560#comment-16715560 ] Larry McCay commented on HADOOP-15995: -- I see [~lukmajercak], so can we make a cha

[jira] [Comment Edited] (HADOOP-15995) LdapGroupsMapping should use the bind.password config value as credential alias

[ https://issues.apache.org/jira/browse/HADOOP-15995?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16715548#comment-16715548 ] Larry McCay edited comment on HADOOP-15995 at 12/10/18 9:03 PM: -

[jira] [Comment Edited] (HADOOP-15995) LdapGroupsMapping should use the bind.password config value as credential alias

[ https://issues.apache.org/jira/browse/HADOOP-15995?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16715548#comment-16715548 ] Larry McCay edited comment on HADOOP-15995 at 12/10/18 9:01 PM: -

[jira] [Commented] (HADOOP-15808) Harden Token service loader use

[ https://issues.apache.org/jira/browse/HADOOP-15808?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16715232#comment-16715232 ] Larry McCay commented on HADOOP-15808: -- [~ste...@apache.org] - what is the differe

[jira] [Commented] (HADOOP-15966) Hadoop Kerberos broken on macos as java.security.krb5.realm is reset

[ https://issues.apache.org/jira/browse/HADOOP-15966?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16707645#comment-16707645 ] Larry McCay commented on HADOOP-15966: -- Lack of tests doesn't seem like it should

[jira] [Commented] (HADOOP-15955) declare that fs.s3a.ext. is a prefix for arbitrary extensions

[ https://issues.apache.org/jira/browse/HADOOP-15955?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16703572#comment-16703572 ] Larry McCay commented on HADOOP-15955: -- This makes sense, especially given the ext

[jira] [Commented] (HADOOP-15952) Secure Key Handling Option with TPM2

[ https://issues.apache.org/jira/browse/HADOOP-15952?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16700965#comment-16700965 ] Larry McCay commented on HADOOP-15952: -- [~ste...@apache.org] - I saw this. Thanks

[jira] [Commented] (HADOOP-14556) S3A to support Delegation Tokens

[ https://issues.apache.org/jira/browse/HADOOP-14556?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16700677#comment-16700677 ] Larry McCay commented on HADOOP-14556: -- [~ste...@apache.org] - thanks for consider

[jira] [Commented] (HADOOP-15896) Refine Kerberos based AuthenticationHandler to check proxyuser ACL

[ https://issues.apache.org/jira/browse/HADOOP-15896?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16673559#comment-16673559 ] Larry McCay commented on HADOOP-15896: -- JWTRedirectAuthenticationHandler is not sp

[jira] [Commented] (HADOOP-15855) Review hadoop credential doc, including object store details

[ https://issues.apache.org/jira/browse/HADOOP-15855?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16667771#comment-16667771 ] Larry McCay commented on HADOOP-15855: -- LGTM +1 > Review hadoop credential doc,

[jira] [Commented] (HADOOP-15855) Review hadoop credential doc, including object store details

[ https://issues.apache.org/jira/browse/HADOOP-15855?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16650972#comment-16650972 ] Larry McCay commented on HADOOP-15855: -- {code} +To wrap a filesystem URIs with a

[jira] [Commented] (HADOOP-15839) Review + update cloud store sensitive keys in hadoop.security.sensitive-config-keys

[ https://issues.apache.org/jira/browse/HADOOP-15839?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16646589#comment-16646589 ] Larry McCay commented on HADOOP-15839: -- We do have support for some of these at le

[jira] [Commented] (HADOOP-15839) Review + update cloud store sensitive keys in hadoop.security.sensitive-config-keys

[ https://issues.apache.org/jira/browse/HADOOP-15839?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16645068#comment-16645068 ] Larry McCay commented on HADOOP-15839: -- [~ste...@apache.org] - this LGTM... +1 >

[jira] [Commented] (HADOOP-15687) Credentials class should allow access to aliases

[ https://issues.apache.org/jira/browse/HADOOP-15687?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16588923#comment-16588923 ] Larry McCay commented on HADOOP-15687: -- Hi [~lars_francke] - thanks for the clarif

[jira] [Commented] (HADOOP-15687) Credentials class should allow access to aliases

[ https://issues.apache.org/jira/browse/HADOOP-15687?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16588151#comment-16588151 ] Larry McCay commented on HADOOP-15687: -- Thanks, [~ste...@apache.org]. [~lars_fran

[jira] [Comment Edited] (HADOOP-15583) Stabilize S3A Assumed Role support

[ https://issues.apache.org/jira/browse/HADOOP-15583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16574202#comment-16574202 ] Larry McCay edited comment on HADOOP-15583 at 8/9/18 2:42 AM: ---

[jira] [Commented] (HADOOP-15583) Stabilize S3A Assumed Role support

[ https://issues.apache.org/jira/browse/HADOOP-15583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16574202#comment-16574202 ] Larry McCay commented on HADOOP-15583: -- After complete review, this LGTM once you

[jira] [Commented] (HADOOP-15583) Stabilize S3A Assumed Role support

[ https://issues.apache.org/jira/browse/HADOOP-15583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16571048#comment-16571048 ] Larry McCay commented on HADOOP-15583: -- Couple more nits... * AWSCredentialProvid

[jira] [Commented] (HADOOP-15583) Stabilize S3A Assumed Role support

[ https://issues.apache.org/jira/browse/HADOOP-15583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16570977#comment-16570977 ] Larry McCay commented on HADOOP-15583: -- Hi [~ste...@apache.org] - I thought STS wa

[jira] [Commented] (HADOOP-15642) Update to latest/recent version of aws-sdk for Hadoop 3.2

[ https://issues.apache.org/jira/browse/HADOOP-15642?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16570955#comment-16570955 ] Larry McCay commented on HADOOP-15642: -- LGTM - +1 I like the idea of documenting

[jira] [Comment Edited] (HADOOP-15642) Update to latest/recent version of aws-sdk for Hadoop 3.2

[ https://issues.apache.org/jira/browse/HADOOP-15642?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16570955#comment-16570955 ] Larry McCay edited comment on HADOOP-15642 at 8/7/18 12:17 AM: --

[jira] [Commented] (HADOOP-15518) Authentication filter calling handler after request already authenticated

[ https://issues.apache.org/jira/browse/HADOOP-15518?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16504893#comment-16504893 ] Larry McCay commented on HADOOP-15518: -- [~eyang] - it is unclear to me where the r

[jira] [Assigned] (HADOOP-15518) Authentication filter calling handler after request already authenticated

[ https://issues.apache.org/jira/browse/HADOOP-15518?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay reassigned HADOOP-15518: Assignee: Kevin Minder > Authentication filter calling handler after request already aut

[jira] [Commented] (HADOOP-15405) adl:// to stop using Configuration.getPassword() to look up fs.adl.oauth2.refresh.url

[ https://issues.apache.org/jira/browse/HADOOP-15405?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16450061#comment-16450061 ] Larry McCay commented on HADOOP-15405: -- Thanks for pointing this out, [~ste...@apac

[jira] [Commented] (HADOOP-15357) Configuration.getPropsWithPrefix no longer does variable substitution

[ https://issues.apache.org/jira/browse/HADOOP-15357?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16428702#comment-16428702 ] Larry McCay commented on HADOOP-15357: -- I supposed the fact that get() is already t

[jira] [Commented] (HADOOP-15357) Configuration.getPropsWithPrefix no longer does variable substitution

[ https://issues.apache.org/jira/browse/HADOOP-15357?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16426094#comment-16426094 ] Larry McCay commented on HADOOP-15357: -- I don't disagree - that is not to say that

[jira] [Commented] (HADOOP-15357) Configuration.getPropsWithPrefix no longer does variable substitution

[ https://issues.apache.org/jira/browse/HADOOP-15357?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16425973#comment-16425973 ] Larry McCay commented on HADOOP-15357: -- Hi [~Jim_Brennan] - the patch looks good.

[jira] [Commented] (HADOOP-15357) Configuration.getPropsWithPrefix no longer does variable substitution

[ https://issues.apache.org/jira/browse/HADOOP-15357?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16423282#comment-16423282 ] Larry McCay commented on HADOOP-15357: -- [~Jim_Brennan] - I think that both of your

[jira] [Commented] (HADOOP-15357) Configuration.getPropsWithPrefix no longer does variable substitution

[ https://issues.apache.org/jira/browse/HADOOP-15357?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16422962#comment-16422962 ] Larry McCay commented on HADOOP-15357: -- Hi [~Jim_Brennan] - this definitely is an o

[jira] [Commented] (HADOOP-15325) Make Configuration#getPasswordFromCredentialsProvider() a public API

[ https://issues.apache.org/jira/browse/HADOOP-15325?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16422633#comment-16422633 ] Larry McCay commented on HADOOP-15325: -- I am admittedly sort of close to this imple

[jira] [Commented] (HADOOP-15325) Add an option to make Configuration.getPassword() not to fallback to read passwords from configuration.

[ https://issues.apache.org/jira/browse/HADOOP-15325?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16414720#comment-16414720 ] Larry McCay commented on HADOOP-15325: -- All of that said, if you did want to codify

[jira] [Commented] (HADOOP-15325) Add an option to make Configuration.getPassword() not to fallback to read passwords from configuration.

[ https://issues.apache.org/jira/browse/HADOOP-15325?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16414715#comment-16414715 ] Larry McCay commented on HADOOP-15325: -- [~shv] - It took me a few mins to understan

[jira] [Commented] (HADOOP-15325) Add an option to make Configuration.getPassword() not to fallback to read passwords from configuration.

[ https://issues.apache.org/jira/browse/HADOOP-15325?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16405132#comment-16405132 ] Larry McCay commented on HADOOP-15325: -- Makes sense - +1 for the enhancement idea!

[jira] [Comment Edited] (HADOOP-14507) extend per-bucket secret key config with explicit getPassword() on fs.s3a.$bucket.secret.key

[ https://issues.apache.org/jira/browse/HADOOP-14507?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16366289#comment-16366289 ] Larry McCay edited comment on HADOOP-14507 at 2/15/18 9:43 PM: ---

[jira] [Comment Edited] (HADOOP-14507) extend per-bucket secret key config with explicit getPassword() on fs.s3a.$bucket.secret.key

[ https://issues.apache.org/jira/browse/HADOOP-14507?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16366289#comment-16366289 ] Larry McCay edited comment on HADOOP-14507 at 2/15/18 9:42 PM: ---

[jira] [Commented] (HADOOP-14507) extend per-bucket secret key config with explicit getPassword() on fs.s3a.$bucket.secret.key

[ https://issues.apache.org/jira/browse/HADOOP-14507?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16366289#comment-16366289 ] Larry McCay commented on HADOOP-14507: -- {quote}bq. Note that the value of {{fs.s3a.

[jira] [Comment Edited] (HADOOP-14507) extend per-bucket secret key config with explicit getPassword() on fs.s3a.$bucket.secret,key

[ https://issues.apache.org/jira/browse/HADOOP-14507?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16365538#comment-16365538 ] Larry McCay edited comment on HADOOP-14507 at 2/15/18 1:47 PM: ---

[jira] [Commented] (HADOOP-14507) extend per-bucket secret key config with explicit getPassword() on fs.s3a.$bucket.secret,key

[ https://issues.apache.org/jira/browse/HADOOP-14507?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16365538#comment-16365538 ] Larry McCay commented on HADOOP-14507: -- Hi [~ste...@apache.org] - this looks good.

[jira] [Commented] (HADOOP-14799) Update nimbus-jose-jwt to 4.41.1

[ https://issues.apache.org/jira/browse/HADOOP-14799?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16362598#comment-16362598 ] Larry McCay commented on HADOOP-14799: -- Is there a reason that this wasn't backport

[jira] [Comment Edited] (HADOOP-11717) Add Redirecting WebSSO behavior with JWT Token in Hadoop Auth

[ https://issues.apache.org/jira/browse/HADOOP-11717?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16362594#comment-16362594 ] Larry McCay edited comment on HADOOP-11717 at 2/13/18 4:31 PM: ---

[jira] [Commented] (HADOOP-11717) Add Redirecting WebSSO behavior with JWT Token in Hadoop Auth

[ https://issues.apache.org/jira/browse/HADOOP-11717?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16362594#comment-16362594 ] Larry McCay commented on HADOOP-11717: -- [~brahmareddy] - Thanks - why hasn't HADOOP

[jira] [Commented] (HADOOP-15222) Refine proxy user authorization to support multiple ACL list

[ https://issues.apache.org/jira/browse/HADOOP-15222?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16361756#comment-16361756 ] Larry McCay commented on HADOOP-15222: -- Revert it from all branches and put it back

[jira] [Commented] (HADOOP-15222) Refine proxy user authorization to support multiple ACL list

[ https://issues.apache.org/jira/browse/HADOOP-15222?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16361602#comment-16361602 ] Larry McCay commented on HADOOP-15222: -- [~eyang] - IMO, we need to revert both HADO

[jira] [Commented] (HADOOP-15157) Zookeeper authentication related properties to support CredentialProviders

[ https://issues.apache.org/jira/browse/HADOOP-15157?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16311646#comment-16311646 ] Larry McCay commented on HADOOP-15157: -- Hi [~grepas] - this is a good idea. Couple

[jira] [Resolved] (HADOOP-15075) Implement KnoxSSO for hadoop web UIs (hdfs, yarn, history server etc.)

[ https://issues.apache.org/jira/browse/HADOOP-15075?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay resolved HADOOP-15075. -- Resolution: Not A Problem Closing as not a problem - since JWTRedirectAuthenticationHandler sh

[jira] [Commented] (HADOOP-15075) Implement KnoxSSO for hadoop web UIs (hdfs, yarn, history server etc.)

[ https://issues.apache.org/jira/browse/HADOOP-15075?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16270672#comment-16270672 ] Larry McCay commented on HADOOP-15075: -- [~rmadhu877] - Please take a look at using

[jira] [Commented] (HADOOP-13556) Change Configuration.getPropsWithPrefix to use getProps instead of iterator

[ https://issues.apache.org/jira/browse/HADOOP-13556?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16186644#comment-16186644 ] Larry McCay commented on HADOOP-13556: -- [~asuresh] - why push it out? It has a gree

[jira] [Commented] (HADOOP-14821) Executing the command 'hdfs -Dhadoop.security.credential.provider.path=file1.jceks,file2.jceks' fails if permission is denied to some files

[ https://issues.apache.org/jira/browse/HADOOP-14821?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16152767#comment-16152767 ] Larry McCay commented on HADOOP-14821: -- This is something that I was aware of but h

  1   2   3   4   5   6   7   8   9   10   >