[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15900196#comment-15900196 ] Alejandro Abdelnur commented on HADOOP-13805: - Hi [~daryn], The exception we were hitting

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15870923#comment-15870923 ] Alejandro Abdelnur commented on HADOOP-13805: - I've got confirmation the patch is working as

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15839844#comment-15839844 ] Alejandro Abdelnur commented on HADOOP-13805: - patch9 lgtm, +1. It would be great if you can

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15837592#comment-15837592 ] Alejandro Abdelnur commented on HADOOP-13805: - patch8 looks good. A few things regarding

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15823796#comment-15823796 ] Alejandro Abdelnur commented on HADOOP-13805: - [~yzhangal], I understand your concern on

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15811981#comment-15811981 ] Alejandro Abdelnur commented on HADOOP-13805: - [~xiaochen], Unless I'm missing something, I

[jira] [Commented] (HADOOP-13807) UGI renewal thread should be spawn only if the keytab is not external

[ https://issues.apache.org/jira/browse/HADOOP-13807?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15797839#comment-15797839 ] Alejandro Abdelnur commented on HADOOP-13807: - [~xiaochen], the message was

[jira] [Updated] (HADOOP-13807) UGI renewal thread should be spawn only if the keytab is not external

[ https://issues.apache.org/jira/browse/HADOOP-13807?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-13807: Summary: UGI renewal thread should be spawn only if the keytab is not external

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15797799#comment-15797799 ] Alejandro Abdelnur commented on HADOOP-13805: - [~xiaochen], {{kinit -R}} assumes the TGT

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15741459#comment-15741459 ] Alejandro Abdelnur commented on HADOOP-13805: - [~xiaochen], sorry missed your NOV18 comment.

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15671471#comment-15671471 ] Alejandro Abdelnur commented on HADOOP-13805: - Patch LGTM, I was missing the point that when

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15666971#comment-15666971 ] Alejandro Abdelnur commented on HADOOP-13805: - [~xiaochen], If you create a {{UGI}} from

[jira] [Updated] (HADOOP-13807) UGI renewal thread should be spawn only if the keytaab is not external

[ https://issues.apache.org/jira/browse/HADOOP-13807?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-13807: Description: The renewal thread should not be spawned if the keytab is external.

[jira] [Commented] (HADOOP-13807) UGI renewal thread should be spawn only if the keytaab is not external

[ https://issues.apache.org/jira/browse/HADOOP-13807?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15654094#comment-15654094 ] Alejandro Abdelnur commented on HADOOP-13807: - The following method in the UGI should add

[jira] [Created] (HADOOP-13807) UGI renewal thread should be spawn only if the keytaab is not external

Alejandro Abdelnur created HADOOP-13807: --- Summary: UGI renewal thread should be spawn only if the keytaab is not external Key: HADOOP-13807 URL: https://issues.apache.org/jira/browse/HADOOP-13807

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15653489#comment-15653489 ] Alejandro Abdelnur commented on HADOOP-13805: - A quick way to verify the proposed solution

[jira] [Updated] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-13805: Description: HADOOP-13558 intention was to avoid UGI from trying to renew the TGT

[jira] [Commented] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15653479#comment-15653479 ] Alejandro Abdelnur commented on HADOOP-13805: - The solution, and I think is a safe one, is

[jira] [Updated] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

[ https://issues.apache.org/jira/browse/HADOOP-13805?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-13805: Description: HADOOP-13558 intention was to avoid UGI from trying to renew the TGT

[jira] [Created] (HADOOP-13805) UGI.getCurrentUser() fails if user does not have a keytab associated

Alejandro Abdelnur created HADOOP-13805: --- Summary: UGI.getCurrentUser() fails if user does not have a keytab associated Key: HADOOP-13805 URL: https://issues.apache.org/jira/browse/HADOOP-13805

[jira] [Comment Edited] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15652339#comment-15652339 ] Alejandro Abdelnur edited comment on HADOOP-13558 at 11/9/16 11:15 PM:

[jira] [Commented] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15652339#comment-15652339 ] Alejandro Abdelnur commented on HADOOP-13558: - [~zhz], I'm still running into issues with

[jira] [Commented] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15457339#comment-15457339 ] Alejandro Abdelnur commented on HADOOP-13558: - got it, thx. +1 > UserGroupInformation

[jira] [Commented] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=1548#comment-1548 ] Alejandro Abdelnur commented on HADOOP-13558: - LGTM, still i'm struggling with the

[jira] [Commented] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15452457#comment-15452457 ] Alejandro Abdelnur commented on HADOOP-13558: - [~lmccay], [~ste...@apache.org], thanks for

[jira] [Commented] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15450181#comment-15450181 ] Alejandro Abdelnur commented on HADOOP-13558: - Looking a bit more I think [~xiaochen]

[jira] [Commented] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15446915#comment-15446915 ] Alejandro Abdelnur commented on HADOOP-13558: - [~xiaochen], i think, when given a Subject,

[jira] [Updated] (HADOOP-13557) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13557?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-13557: Summary: UserGroupInformation created from a Subject incorrectly tries to renew

[jira] [Updated] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13558?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-13558: Summary: UserGroupInformation created from a Subject incorrectly tries to renew

[jira] [Commented] (HADOOP-13557) UserGroupInformation created from a Subject incorrectly tries to renew the Keberos ticket

[ https://issues.apache.org/jira/browse/HADOOP-13557?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15446854#comment-15446854 ] Alejandro Abdelnur commented on HADOOP-13557: - Thanks [~xiaochen], jira hang on me on the

[jira] [Created] (HADOOP-13557) UserGroupInformation created from a Subject incorrectly tries to renew the Keberos ticket

Alejandro Abdelnur created HADOOP-13557: --- Summary: UserGroupInformation created from a Subject incorrectly tries to renew the Keberos ticket Key: HADOOP-13557 URL:

[jira] [Created] (HADOOP-13558) UserGroupInformation created from a Subject incorrectly tries to renew the Keberos ticket

Alejandro Abdelnur created HADOOP-13558: --- Summary: UserGroupInformation created from a Subject incorrectly tries to renew the Keberos ticket Key: HADOOP-13558 URL:

[jira] [Commented] (HADOOP-10101) Update guava dependency to the latest version

[ https://issues.apache.org/jira/browse/HADOOP-10101?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14297320#comment-14297320 ] Alejandro Abdelnur commented on HADOOP-10101: - Am I missing something here?

[jira] [Commented] (HADOOP-10101) Update guava dependency to the latest version

[ https://issues.apache.org/jira/browse/HADOOP-10101?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14297466#comment-14297466 ] Alejandro Abdelnur commented on HADOOP-10101: - got it, thx Update guava

[jira] [Commented] (HADOOP-11343) Overflow is not properly handled in caclulating final iv for AES CTR

[ https://issues.apache.org/jira/browse/HADOOP-11343?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14233348#comment-14233348 ] Alejandro Abdelnur commented on HADOOP-11343: - Got the issue now. +1 to

[jira] [Commented] (HADOOP-11343) Overflow is not properly handled in caclulating final iv for AES CTR

[ https://issues.apache.org/jira/browse/HADOOP-11343?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14232644#comment-14232644 ] Alejandro Abdelnur commented on HADOOP-11343: - If I recall correctly, if we

[jira] [Commented] (HADOOP-10895) HTTP KerberosAuthenticator fallback should have a flag to disable it

[ https://issues.apache.org/jira/browse/HADOOP-10895?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14200489#comment-14200489 ] Alejandro Abdelnur commented on HADOOP-10895: - The name of the properties

[jira] [Commented] (HADOOP-10895) HTTP KerberosAuthenticator fallback should have a flag to disable it

[ https://issues.apache.org/jira/browse/HADOOP-10895?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14199303#comment-14199303 ] Alejandro Abdelnur commented on HADOOP-10895: - Modifying the

[jira] [Commented] (HADOOP-10895) HTTP KerberosAuthenticator fallback should have a flag to disable it

[ https://issues.apache.org/jira/browse/HADOOP-10895?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14194747#comment-14194747 ] Alejandro Abdelnur commented on HADOOP-10895: - IMO, the fallback is a

[jira] [Commented] (HADOOP-10895) HTTP KerberosAuthenticator fallback should have a flag to disable it

[ https://issues.apache.org/jira/browse/HADOOP-10895?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14194887#comment-14194887 ] Alejandro Abdelnur commented on HADOOP-10895: - Because the

[jira] [Commented] (HADOOP-10895) HTTP KerberosAuthenticator fallback should have a flag to disable it

[ https://issues.apache.org/jira/browse/HADOOP-10895?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14194998#comment-14194998 ] Alejandro Abdelnur commented on HADOOP-10895: - Robert, I'm not suggesting

[jira] [Commented] (HADOOP-11260) Patch up Jetty to disable SSLv3

[ https://issues.apache.org/jira/browse/HADOOP-11260?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14195716#comment-14195716 ] Alejandro Abdelnur commented on HADOOP-11260: - +1, LGTM. I assume testing

[jira] [Commented] (HADOOP-10895) HTTP KerberosAuthenticator fallback should have a flag to disable it

[ https://issues.apache.org/jira/browse/HADOOP-10895?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14176382#comment-14176382 ] Alejandro Abdelnur commented on HADOOP-10895: - yongjun, go ahead, take it

[jira] [Commented] (HADOOP-11200) HttpFS proxyuser, doAs param is case sensitive

[ https://issues.apache.org/jira/browse/HADOOP-11200?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14170437#comment-14170437 ] Alejandro Abdelnur commented on HADOOP-11200: - [~lmccay], HADOOP-11083 fixed

[jira] [Commented] (HADOOP-11200) HttpFS proxyuser, doAs param is case sensitive

[ https://issues.apache.org/jira/browse/HADOOP-11200?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14170448#comment-14170448 ] Alejandro Abdelnur commented on HADOOP-11200: - yes, in branch-2, it should

[jira] [Commented] (HADOOP-11017) KMS delegation token secret manager should be able to use zookeeper as store

[ https://issues.apache.org/jira/browse/HADOOP-11017?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14142042#comment-14142042 ] Alejandro Abdelnur commented on HADOOP-11017: - +1 KMS delegation token

[jira] [Updated] (HADOOP-11017) KMS delegation token secret manager should be able to use zookeeper as store

[ https://issues.apache.org/jira/browse/HADOOP-11017?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11017: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Commented] (HADOOP-11017) KMS delegation token secret manager should be able to use zookeeper as store

[ https://issues.apache.org/jira/browse/HADOOP-11017?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14140813#comment-14140813 ] Alejandro Abdelnur commented on HADOOP-11017: -

[jira] [Updated] (HADOOP-11112) TestKMSWithZK does not use KEY_PROVIDER_URI

[ https://issues.apache.org/jira/browse/HADOOP-2?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-2: Status: Patch Available (was: Open) TestKMSWithZK does not use KEY_PROVIDER_URI

[jira] [Updated] (HADOOP-11112) TestKMSWithZK does not use KEY_PROVIDER_URI

[ https://issues.apache.org/jira/browse/HADOOP-2?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-2: Attachment: HADOOP-2.patch without this the testcase fails. TestKMSWithZK

[jira] [Created] (HADOOP-11112) TestKMSWithZK does not use KEY_PROVIDER_URI

Alejandro Abdelnur created HADOOP-2: --- Summary: TestKMSWithZK does not use KEY_PROVIDER_URI Key: HADOOP-2 URL: https://issues.apache.org/jira/browse/HADOOP-2 Project: Hadoop Common

[jira] [Commented] (HADOOP-11017) KMS delegation token secret manager should be able to use zookeeper as store

[ https://issues.apache.org/jira/browse/HADOOP-11017?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14141695#comment-14141695 ] Alejandro Abdelnur commented on HADOOP-11017: - *SecretManager.java*: * the

[jira] [Commented] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14139074#comment-14139074 ] Alejandro Abdelnur commented on HADOOP-10982: - the test failure reports

[jira] [Commented] (HADOOP-11017) KMS delegation token secret manager should be able to use zookeeper as store

[ https://issues.apache.org/jira/browse/HADOOP-11017?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14139129#comment-14139129 ] Alejandro Abdelnur commented on HADOOP-11017: - Initial pass of feedback,

[jira] [Commented] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14139245#comment-14139245 ] Alejandro Abdelnur commented on HADOOP-10982: - OK, this is weird, I've

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: HADOOP-10982.patch Version of the patch without testcase changes,

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: DUMMY.patch g, still failing. going for a dummy patch that adds a

[jira] [Issue Comment Deleted] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Comment: was deleted (was: g, still failing. going for a dummy patch that

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: (was: DUMMY.patch) KMS: Support for multiple Kerberos principals

[jira] [Commented] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14139616#comment-14139616 ] Alejandro Abdelnur commented on HADOOP-10982: - OK, testpatch is gaga, the

[jira] [Commented] (HADOOP-11017) KMS delegation token secret manager should be able to use zookeeper as store

[ https://issues.apache.org/jira/browse/HADOOP-11017?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14139644#comment-14139644 ] Alejandro Abdelnur commented on HADOOP-11017: - another partial pass on the

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Created] (HADOOP-11108) KMS: add testcase for multiple kerberos principals.

Alejandro Abdelnur created HADOOP-11108: --- Summary: KMS: add testcase for multiple kerberos principals. Key: HADOOP-11108 URL: https://issues.apache.org/jira/browse/HADOOP-11108 Project: Hadoop

[jira] [Commented] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14139677#comment-14139677 ] Alejandro Abdelnur commented on HADOOP-10982: - created HADOOP-11108 for the

[jira] [Updated] (HADOOP-11108) KMS: add testcase for multiple kerberos principals.

[ https://issues.apache.org/jira/browse/HADOOP-11108?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11108: Status: Patch Available (was: Open) KMS: add testcase for multiple kerberos

[jira] [Updated] (HADOOP-11108) KMS: add testcase for multiple kerberos principals.

[ https://issues.apache.org/jira/browse/HADOOP-11108?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11108: Attachment: HADOOP-11108.patch KMS: add testcase for multiple kerberos

[jira] [Commented] (HADOOP-11109) Site build is broken

[ https://issues.apache.org/jira/browse/HADOOP-11109?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14139964#comment-14139964 ] Alejandro Abdelnur commented on HADOOP-11109: - Jian, ATM, thanks for the

[jira] [Commented] (HADOOP-10970) Cleanup KMS configuration keys

[ https://issues.apache.org/jira/browse/HADOOP-10970?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14139989#comment-14139989 ] Alejandro Abdelnur commented on HADOOP-10970: - +1 Cleanup KMS

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: HADOOP-10982.patch KMS: Support for multiple Kerberos principals

[jira] [Commented] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14136839#comment-14136839 ] Alejandro Abdelnur commented on HADOOP-11096: - test failures are due to 'too

[jira] [Updated] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11096: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Resolved] (HADOOP-11097) kms docs say proxyusers, not proxyuser for config params

[ https://issues.apache.org/jira/browse/HADOOP-11097?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur resolved HADOOP-11097. - Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Updated] (HADOOP-11062) CryptoCodec testcases requiring OpenSSL should be run only if -Pnative is used

[ https://issues.apache.org/jira/browse/HADOOP-11062?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11062: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Commented] (HADOOP-11099) KMS return HTTP UNAUTHORIZED 401 on ACL failure

[ https://issues.apache.org/jira/browse/HADOOP-11099?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14137639#comment-14137639 ] Alejandro Abdelnur commented on HADOOP-11099: - [~hitliuyi], the

[jira] [Updated] (HADOOP-11099) KMS return HTTP UNAUTHORIZED 401 on ACL failure

[ https://issues.apache.org/jira/browse/HADOOP-11099?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11099: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Updated] (HADOOP-11016) KMS should support signing cookies with zookeeper secret manager

[ https://issues.apache.org/jira/browse/HADOOP-11016?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11016: Status: Patch Available (was: Open) KMS should support signing cookies with

[jira] [Updated] (HADOOP-11016) KMS should support signing cookies with zookeeper secret manager

[ https://issues.apache.org/jira/browse/HADOOP-11016?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11016: Attachment: HADOOP-11016.patch rebased. KMS should support signing cookies with

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: HADOOP-10982.patch new patch addressing feedback. will wait till

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Status: Patch Available (was: Open) KMS: Support for multiple Kerberos

[jira] [Updated] (HADOOP-11016) KMS should support signing cookies with zookeeper secret manager

[ https://issues.apache.org/jira/browse/HADOOP-11016?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11016: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Attachment: HADOOP-10982.patch rebasing KMS: Support for multiple Kerberos

[jira] [Resolved] (HADOOP-11075) hadoop-kms is not being published to maven

[ https://issues.apache.org/jira/browse/HADOOP-11075?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur resolved HADOOP-11075. - Resolution: Duplicate Integrating this into HDFS-7006, will give credit to

[jira] [Moved] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur moved HDFS-7074 to HADOOP-11096: --- Component/s: (was: security)

[jira] [Updated] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11096: Target Version/s: 2.6.0 Assignee: Arun Suresh (was: Alejandro

[jira] [Assigned] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur reassigned HADOOP-11096: --- Assignee: Alejandro Abdelnur (was: Arun Suresh) KMS:

[jira] [Updated] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11096: Attachment: HADOOP-11096.patch KMS: KeyAuthorizationKeyProvider should verify

[jira] [Updated] (HADOOP-11096) KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt

[ https://issues.apache.org/jira/browse/HADOOP-11096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11096: Status: Patch Available (was: Open) KMS: KeyAuthorizationKeyProvider should

[jira] [Commented] (HADOOP-11097) kms docs say proxyusers, not proxyuser for config params

[ https://issues.apache.org/jira/browse/HADOOP-11097?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14136397#comment-14136397 ] Alejandro Abdelnur commented on HADOOP-11097: - +1 kms docs say proxyusers,

[jira] [Assigned] (HADOOP-11016) KMS should support signing cookies with zookeeper secret manager

[ https://issues.apache.org/jira/browse/HADOOP-11016?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur reassigned HADOOP-11016: --- Assignee: Alejandro Abdelnur (was: Arun Suresh) KMS should support

[jira] [Created] (HADOOP-11099) KMS return HTTP UNAUTHORIZED 401 on ACL failure

Alejandro Abdelnur created HADOOP-11099: --- Summary: KMS return HTTP UNAUTHORIZED 401 on ACL failure Key: HADOOP-11099 URL: https://issues.apache.org/jira/browse/HADOOP-11099 Project: Hadoop

[jira] [Updated] (HADOOP-11099) KMS return HTTP UNAUTHORIZED 401 on ACL failure

[ https://issues.apache.org/jira/browse/HADOOP-11099?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11099: Attachment: HADOOP-11099.patch KMS return HTTP UNAUTHORIZED 401 on ACL failure

[jira] [Updated] (HADOOP-11099) KMS return HTTP UNAUTHORIZED 401 on ACL failure

[ https://issues.apache.org/jira/browse/HADOOP-11099?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11099: Status: Patch Available (was: Open) no new testcase, existing testcases are

[jira] [Updated] (HADOOP-11016) KMS should support signing cookies with zookeeper secret manager

[ https://issues.apache.org/jira/browse/HADOOP-11016?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-11016: Attachment: HADOOP-11016.patch The patch is exclusively documentation and a

[jira] [Commented] (HADOOP-11062) CryptoCodec testcases requiring OpenSSL should be run only if -Pnative is used

[ https://issues.apache.org/jira/browse/HADOOP-11062?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14136772#comment-14136772 ] Alejandro Abdelnur commented on HADOOP-11062: - +1 CryptoCodec testcases

[jira] [Commented] (HADOOP-11062) CryptoCodec testcases requiring OpenSSL should be run only if -Pnative is used

[ https://issues.apache.org/jira/browse/HADOOP-11062?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14136775#comment-14136775 ] Alejandro Abdelnur commented on HADOOP-11062: - [~asuresh], would you please

[jira] [Resolved] (HADOOP-11018) KMS should load multiple kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-11018?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur resolved HADOOP-11018. - Resolution: Duplicate KMS should load multiple kerberos principals

[jira] [Updated] (HADOOP-10982) KMS: Support for multiple Kerberos principals

[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10982: Summary: KMS: Support for multiple Kerberos principals (was: Multiple Kerberos

[jira] [Commented] (HADOOP-10868) Create a ZooKeeper-backed secret provider

[ https://issues.apache.org/jira/browse/HADOOP-10868?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14134107#comment-14134107 ] Alejandro Abdelnur commented on HADOOP-10868: - *JaasConfiguration.java*: *

[jira] [Commented] (HADOOP-10868) Create a ZooKeeper-backed secret provider

[ https://issues.apache.org/jira/browse/HADOOP-10868?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14134666#comment-14134666 ] Alejandro Abdelnur commented on HADOOP-10868: - +1 Create a

[jira] [Updated] (HADOOP-10868) Create a ZooKeeper-backed secret provider

[ https://issues.apache.org/jira/browse/HADOOP-10868?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alejandro Abdelnur updated HADOOP-10868: Resolution: Fixed Fix Version/s: 2.6.0 Hadoop Flags: Reviewed

  1   2   3   4   5   6   7   8   9   10   >