Re: CredentialProvider API

2019-04-25 Thread Wei-Chiu Chuang
A similar issue is https://issues.apache.org/jira/browse/HADOOP-15412 You can't put the keystore for KMS in HDFS, and I filed https://issues.apache.org/jira/browse/HADOOP-15413 to document it. Karthik, would you consider use HADOOP-15413 to document scenarios where it is not supported? Additional

Re: CredentialProvider API

2019-04-25 Thread Steve Loughran
didn't think it worked at all, that is: you can't store the credentials to access an FS in the FS. There's some configuration option to disable specific sources of JCEKS files, and the one which reads in through the hadoop FS API shouldn't be included when reading any credentials needed to work wit

Re: CredentialProvider API

2019-04-24 Thread larry mccay
This is likely an issue only for issues where we need the password from HDFS in order to access HDFS. This should definitely be avoided by not having a static credential provider path configured for startup that includes such a dependency. For instance, the JIRA you cite is an example where we nee