Re: CredentialProvider API

A similar issue is https://issues.apache.org/jira/browse/HADOOP-15412 You can't put the keystore for KMS in HDFS, and I filed https://issues.apache.org/jira/browse/HADOOP-15413 to document it. Karthik, would you consider use HADOOP-15413 to document scenarios where it is not supported?

Re: CredentialProvider API

didn't think it worked at all, that is: you can't store the credentials to access an FS in the FS. There's some configuration option to disable specific sources of JCEKS files, and the one which reads in through the hadoop FS API shouldn't be included when reading any credentials needed to work

Re: CredentialProvider API

This is likely an issue only for issues where we need the password from HDFS in order to access HDFS. This should definitely be avoided by not having a static credential provider path configured for startup that includes such a dependency. For instance, the JIRA you cite is an example where we

CredentialProvider API

Team, Datanode is failed to restart after configuring credentials provider, storing credential into HDFS (jceks://hdfs@hostname :9001/credential/keys.jceks). Getting a StackOverFlow error in datanode jsvc.out file similar to HADOOP-11934 . As

[jira] [Created] (HADOOP-13990) Document KMS use of CredentialProvider API

John Zhuge created HADOOP-13990: --- Summary: Document KMS use of CredentialProvider API Key: HADOOP-13990 URL: https://issues.apache.org/jira/browse/HADOOP-13990 Project: Hadoop Common Issue

Re: Bug in SSLFactory to use CredentialProvider API?

Created https://issues.apache.org/jira/browse/HADOOP-13987 John Zhuge Software Engineer, Cloudera On Thu, Jan 12, 2017 at 11:34 PM, John Zhuge wrote: > Hi gurus, > > I am testing CredentialProvider with KMS: populated the credentials file, > added >

Bug in SSLFactory to use CredentialProvider API?

Hi gurus, I am testing CredentialProvider with KMS: populated the credentials file, added "hadoop.security.credential.provider.path" to core-site.xml, but "hadoop key list" failed due to incorrect password. So I added "hadoop.security.credential.provider.path" to ssl-client.xml, "hadoop key list"

[jira] [Created] (HADOOP-13956) Use CredentialProvider API to protect ADLS credentials

John Zhuge created HADOOP-13956: --- Summary: Use CredentialProvider API to protect ADLS credentials Key: HADOOP-13956 URL: https://issues.apache.org/jira/browse/HADOOP-13956 Project: Hadoop Common

[jira] [Created] (HADOOP-12076) Incomplete Cache Mechanism in CredentialProvider API

Larry McCay created HADOOP-12076: Summary: Incomplete Cache Mechanism in CredentialProvider API Key: HADOOP-12076 URL: https://issues.apache.org/jira/browse/HADOOP-12076 Project: Hadoop Common