[jira] [Updated] (HDFS-10481) HTTPFS server should correctly impersonate as end user to open file
[ https://issues.apache.org/jira/browse/HDFS-10481?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Andrew Wang updated HDFS-10481: --- Resolution: Fixed Fix Version/s: 2.8.0 Status: Resolved (was: Patch Available) Nice work here Xiao, +1 LGTM and thanks for the contribution. Committed back through 2.8.0. > HTTPFS server should correctly impersonate as end user to open file > --- > > Key: HDFS-10481 > URL: https://issues.apache.org/jira/browse/HDFS-10481 > Project: Hadoop HDFS > Issue Type: Bug > Components: httpfs >Affects Versions: 0.23.1 >Reporter: Xiao Chen >Assignee: Xiao Chen > Fix For: 2.8.0 > > Attachments: HDFS-10481.01.patch, HDFS-10481.02.patch > > > Seen issues where applications like oozie/hue connecting to httpfs to read an > encryption zone will end up being rejected by the KMS, because logged in as > httpfs instead of the end user. > The issue exists since the initial feature HDFS-2178. -- This message was sent by Atlassian JIRA (v6.3.4#6332) - To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
[jira] [Updated] (HDFS-10481) HTTPFS server should correctly impersonate as end user to open file
[ https://issues.apache.org/jira/browse/HDFS-10481?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Andrew Wang updated HDFS-10481: --- Component/s: httpfs > HTTPFS server should correctly impersonate as end user to open file > --- > > Key: HDFS-10481 > URL: https://issues.apache.org/jira/browse/HDFS-10481 > Project: Hadoop HDFS > Issue Type: Bug > Components: httpfs >Affects Versions: 0.23.1 >Reporter: Xiao Chen >Assignee: Xiao Chen > Fix For: 2.8.0 > > Attachments: HDFS-10481.01.patch, HDFS-10481.02.patch > > > Seen issues where applications like oozie/hue connecting to httpfs to read an > encryption zone will end up being rejected by the KMS, because logged in as > httpfs instead of the end user. > The issue exists since the initial feature HDFS-2178. -- This message was sent by Atlassian JIRA (v6.3.4#6332) - To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
[jira] [Updated] (HDFS-10481) HTTPFS server should correctly impersonate as end user to open file
[ https://issues.apache.org/jira/browse/HDFS-10481?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Xiao Chen updated HDFS-10481: - Attachment: HDFS-10481.02.patch Patch 2 to make checkstyle happy. (It's the switch indentation that's in original code). I didn't add any unit test for this because I manually tested (similar to the fix in HADOOP-12787). It will be an end-to-end testing anyways. > HTTPFS server should correctly impersonate as end user to open file > --- > > Key: HDFS-10481 > URL: https://issues.apache.org/jira/browse/HDFS-10481 > Project: Hadoop HDFS > Issue Type: Bug >Affects Versions: 0.23.1 >Reporter: Xiao Chen >Assignee: Xiao Chen > Attachments: HDFS-10481.01.patch, HDFS-10481.02.patch > > > Seen issues where applications like oozie/hue connecting to httpfs to read an > encryption zone will end up being rejected by the KMS, because logged in as > httpfs instead of the end user. > The issue exists since the initial feature HDFS-2178. -- This message was sent by Atlassian JIRA (v6.3.4#6332) - To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
[jira] [Updated] (HDFS-10481) HTTPFS server should correctly impersonate as end user to open file
[
https://issues.apache.org/jira/browse/HDFS-10481?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Xiao Chen updated HDFS-10481:
-
Attachment: HDFS-10481.01.patch
Attaching a patch to fix this. Manually tested the existing issue is fixed
after this patch.
Sanity checked the code, only {{OPEN}} needs be fixed here, since we're
special-casing it for streaming read. All other actions execute through
{{FileSystemAccessService#execute}}, which correctly impersonates.
> HTTPFS server should correctly impersonate as end user to open file
> ---
>
> Key: HDFS-10481
> URL: https://issues.apache.org/jira/browse/HDFS-10481
> Project: Hadoop HDFS
> Issue Type: Bug
>Affects Versions: 0.23.1
>Reporter: Xiao Chen
>Assignee: Xiao Chen
> Attachments: HDFS-10481.01.patch
>
>
> Seen issues where applications like oozie/hue connecting to httpfs to read an
> encryption zone will end up being rejected by the KMS, because logged in as
> httpfs instead of the end user.
> The issue exists since the initial feature HDFS-2178.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
-
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
[jira] [Updated] (HDFS-10481) HTTPFS server should correctly impersonate as end user to open file
[ https://issues.apache.org/jira/browse/HDFS-10481?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Xiao Chen updated HDFS-10481: - Status: Patch Available (was: Open) > HTTPFS server should correctly impersonate as end user to open file > --- > > Key: HDFS-10481 > URL: https://issues.apache.org/jira/browse/HDFS-10481 > Project: Hadoop HDFS > Issue Type: Bug >Affects Versions: 0.23.1 >Reporter: Xiao Chen >Assignee: Xiao Chen > Attachments: HDFS-10481.01.patch > > > Seen issues where applications like oozie/hue connecting to httpfs to read an > encryption zone will end up being rejected by the KMS, because logged in as > httpfs instead of the end user. > The issue exists since the initial feature HDFS-2178. -- This message was sent by Atlassian JIRA (v6.3.4#6332) - To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
