[jira] [Reopened] (HADOOP-15821) Move Hadoop YARN Registry to Hadoop Registry

2018-10-20 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15821?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang reopened HADOOP-15821: > Move Hadoop YARN Registry to Hadoop Registry > > >

[jira] [Commented] (HADOOP-15821) Move Hadoop YARN Registry to Hadoop Registry

2018-10-19 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15821?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16657671#comment-16657671 ] Eric Yang commented on HADOOP-15821: [~elgoiri] Yes, it needs the relativePath tag for correctness.

[jira] [Commented] (HADOOP-15821) Move Hadoop YARN Registry to Hadoop Registry

2018-10-19 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15821?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16657581#comment-16657581 ] Eric Yang commented on HADOOP-15821: +1 [~elgoiri] Thank you for the patch. Patch 9 works as

[jira] [Updated] (HADOOP-15821) Move Hadoop YARN Registry to Hadoop Registry

2018-10-19 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15821?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-15821: --- Target Version/s: 3.3.0 Fix Version/s: 3.3.0 > Move Hadoop YARN Registry to Hadoop Registry

[jira] [Updated] (HADOOP-15821) Move Hadoop YARN Registry to Hadoop Registry

2018-10-19 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15821?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-15821: --- Resolution: Fixed Status: Resolved (was: Patch Available) > Move Hadoop YARN Registry to

[jira] [Comment Edited] (HADOOP-15832) Upgrade BouncyCastle to 1.60

2018-10-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16655708#comment-16655708 ] Eric Yang edited comment on HADOOP-15832 at 10/18/18 6:26 PM: -- When

[jira] [Commented] (HADOOP-15832) Upgrade BouncyCastle to 1.60

2018-10-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16655708#comment-16655708 ] Eric Yang commented on HADOOP-15832: When looking at mvn dependency:tree, it shows that: {code}

[jira] [Comment Edited] (HADOOP-15832) Upgrade BouncyCastle to 1.60

2018-10-17 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16654307#comment-16654307 ] Eric Yang edited comment on HADOOP-15832 at 10/17/18 11:33 PM: ---

[jira] [Comment Edited] (HADOOP-15832) Upgrade BouncyCastle to 1.60

2018-10-17 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16654307#comment-16654307 ] Eric Yang edited comment on HADOOP-15832 at 10/17/18 10:32 PM: ---

[jira] [Commented] (HADOOP-15832) Upgrade BouncyCastle to 1.60

2018-10-17 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16654307#comment-16654307 ] Eric Yang commented on HADOOP-15832: [~rkanter], MiniYARNCluster is the one failing. In

[jira] [Commented] (HADOOP-15832) Upgrade BouncyCastle to 1.60

2018-10-17 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16654265#comment-16654265 ] Eric Yang commented on HADOOP-15832: [~rkanter] Minicluster is throwing class not found exception

[jira] [Commented] (HADOOP-15821) Move Hadoop YARN Registry to Hadoop Registry

2018-10-05 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15821?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16640429#comment-16640429 ] Eric Yang commented on HADOOP-15821: [~elgoiri] YARN classpath is missing

[jira] [Commented] (HADOOP-15821) Move Hadoop YARN Registry to Hadoop Registry

2018-10-05 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15821?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16640280#comment-16640280 ] Eric Yang commented on HADOOP-15821: [~elgoiri] For ServiceDiscovery.md, it is probably best to

[jira] [Commented] (HADOOP-15821) Move Hadoop YARN Registry to Hadoop Registry

2018-10-04 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15821?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16638990#comment-16638990 ] Eric Yang commented on HADOOP-15821: {quote}Had to change YarnConfiguration,

[jira] [Commented] (HADOOP-15765) Can not find login module class for IBM due to hard codes

2018-09-21 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15765?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16623890#comment-16623890 ] Eric Yang commented on HADOOP-15765: [~jiangjianfei] How about IBM Java version detection to make

[jira] [Commented] (HADOOP-15774) Discovery of HA servers

2018-09-21 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15774?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16623860#comment-16623860 ] Eric Yang commented on HADOOP-15774: RegistryDNS is a tool to provide DNS resolution. If namenode

[jira] [Commented] (HADOOP-15765) Can not find login module class for IBM due to hard codes

2018-09-19 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15765?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16620769#comment-16620769 ] Eric Yang commented on HADOOP-15765: If the security class is configurable via config file, then

[jira] [Commented] (HADOOP-15758) Filesystem.get(URI, Configuration, user) API not working with proxy users

2018-09-17 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15758?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16617983#comment-16617983 ] Eric Yang commented on HADOOP-15758: [~hgadre] {quote}(b) if a ticket cache path is not specified

[jira] [Updated] (HADOOP-14295) Authentication proxy filter may fail authorization because of getRemoteAddr

2018-09-17 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-14295?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-14295: --- Target Version/s: (was: 3.3.0) Status: Open (was: Patch Available)

[jira] [Commented] (HADOOP-15725) FileSystem.deleteOnExit should check user permissions

2018-09-07 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15725?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16607365#comment-16607365 ] Eric Yang commented on HADOOP-15725: [~oshevchenko] Thank you for the example, and I confirmed that

[jira] [Commented] (HADOOP-15725) FileSystem.deleteOnExit should check user permissions

2018-09-06 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15725?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16606317#comment-16606317 ] Eric Yang commented on HADOOP-15725: I believe this is a non-Kerberos setup issue. In non-Kerberos

[jira] [Resolved] (HADOOP-15670) UserGroupInformation TGT renewer thread doesn't use monotonically increasing time for calculating interval to sleep

2018-08-16 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15670?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang resolved HADOOP-15670. Resolution: Not A Problem > UserGroupInformation TGT renewer thread doesn't use monotonically

[jira] [Commented] (HADOOP-15670) UserGroupInformation TGT renewer thread doesn't use monotonically increasing time for calculating interval to sleep

2018-08-16 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15670?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16583182#comment-16583182 ] Eric Yang commented on HADOOP-15670: [~hgadre] There are configuration in KDC in minutes for

[jira] [Updated] (HADOOP-15593) UserGroupInformation TGT renewer throws NPE

2018-07-26 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15593?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-15593: --- Resolution: Fixed Fix Version/s: 3.1.1 3.2.0 Status: Resolved

[jira] [Commented] (HADOOP-15593) UserGroupInformation TGT renewer throws NPE

2018-07-26 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16559019#comment-16559019 ] Eric Yang commented on HADOOP-15593: [~xiaochen] Thank you for the review. +1 patch 5 looks good to

[jira] [Commented] (HADOOP-15600) Set default proxy user settings to non-routable IP addresses and default users group

2018-07-25 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15600?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16556923#comment-16556923 ] Eric Yang commented on HADOOP-15600: For good intend and practical purpose, the default ASF release

[jira] [Updated] (HADOOP-15600) Set default proxy user settings to non-routable IP addresses and default users group

2018-07-25 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15600?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-15600: --- Description: The default setting to restrict the cluster nodes to communicate with peer nodes are

[jira] [Commented] (HADOOP-15600) Set default proxy user settings to non-routable IP addresses and default users group

2018-07-25 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15600?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16556907#comment-16556907 ] Eric Yang commented on HADOOP-15600: [~daryn] Thank you for your reply, but not everyone has the

[jira] [Commented] (HADOOP-15593) UserGroupInformation TGT renewer throws NPE

2018-07-25 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16556408#comment-16556408 ] Eric Yang commented on HADOOP-15593: [~xiaochen] Any concern with patch 005? >

[jira] [Commented] (HADOOP-15593) UserGroupInformation TGT renewer throws NPE

2018-07-24 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16555140#comment-16555140 ] Eric Yang commented on HADOOP-15593: [~xiaochen] If tgt.getEndTime().getTime() captured the

[jira] [Commented] (HADOOP-15593) UserGroupInformation TGT renewer throws NPE

2018-07-24 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16554903#comment-16554903 ] Eric Yang commented on HADOOP-15593: [~xiaochen] Good catch on the logic. I think your suggestion

[jira] [Commented] (HADOOP-15593) UserGroupInformation TGT renewer throws NPE

2018-07-24 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16554659#comment-16554659 ] Eric Yang commented on HADOOP-15593: [~xiaochen] Renewal thread supposed to run until

[jira] [Commented] (HADOOP-15593) UserGroupInformation TGT renewer throws NPE

2018-07-24 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16554453#comment-16554453 ] Eric Yang commented on HADOOP-15593: [~gabor.bota] Thank you for the patch. In patch 003, you have

[jira] [Commented] (HADOOP-15593) UserGroupInformation TGT renewer throws NPE

2018-07-23 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16553145#comment-16553145 ] Eric Yang commented on HADOOP-15593: Two possible approaches to fix the findbug error: {code}

[jira] [Comment Edited] (HADOOP-15593) UserGroupInformation TGT renewer throws NPE

2018-07-20 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16551442#comment-16551442 ] Eric Yang edited comment on HADOOP-15593 at 7/21/18 12:04 AM: -- What if we

[jira] [Commented] (HADOOP-15593) UserGroupInformation TGT renewer throws NPE

2018-07-20 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16551442#comment-16551442 ] Eric Yang commented on HADOOP-15593: What if we catch the null pointer and reset tgtEndTime to now?

[jira] [Commented] (HADOOP-15593) UserGroupInformation TGT renewer throws NPE

2018-07-20 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16550908#comment-16550908 ] Eric Yang commented on HADOOP-15593: [~gabor.bota] Thank you for creating the second issue for

[jira] [Commented] (HADOOP-15593) UserGroupInformation TGT renewer throws NPE

2018-07-19 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16549994#comment-16549994 ] Eric Yang commented on HADOOP-15593: [~leftnoteasy] This issue could cause YarnRegistryDNS to stop

[jira] [Updated] (HADOOP-15593) UserGroupInformation TGT renewer throws NPE

2018-07-19 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15593?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-15593: --- Target Version/s: 3.1.1 Priority: Blocker (was: Critical) > UserGroupInformation TGT

[jira] [Commented] (HADOOP-15593) UserGroupInformation TGT renewer throws NPE

2018-07-19 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16549472#comment-16549472 ] Eric Yang commented on HADOOP-15593: [~gabor.bota] I know you are trying to retain existing

[jira] [Updated] (HADOOP-15610) Hadoop Docker Image Pip Install Fails

2018-07-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15610?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-15610: --- Resolution: Fixed Status: Resolved (was: Patch Available) [~aw] Thank you for the review.

[jira] [Commented] (HADOOP-15610) Hadoop Docker Image Pip Install Fails

2018-07-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15610?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16548505#comment-16548505 ] Eric Yang commented on HADOOP-15610: Jenkins shows: {code} Collecting pylint==1.9.2 Downloading

[jira] [Commented] (HADOOP-15610) Hadoop Docker Image Pip Install Fails

2018-07-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15610?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16548467#comment-16548467 ] Eric Yang commented on HADOOP-15610: [~aw] Hadoop has very little python code. (3 files to be

[jira] [Commented] (HADOOP-15610) Hadoop Docker Image Pip Install Fails

2018-07-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15610?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16548439#comment-16548439 ] Eric Yang commented on HADOOP-15610: [~aw] Reason? > Hadoop Docker Image Pip Install Fails >

[jira] [Commented] (HADOOP-15610) Hadoop Docker Image Pip Install Fails

2018-07-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15610?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16548390#comment-16548390 ] Eric Yang commented on HADOOP-15610: +1 for patch 004 pending Jenkins reports. > Hadoop Docker

[jira] [Commented] (HADOOP-15593) UserGroupInformation TGT renewer throws NPE

2018-07-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16548383#comment-16548383 ] Eric Yang commented on HADOOP-15593: [~gabor.bota] Thank you for the patch. It might be safer to

[jira] [Commented] (HADOOP-15610) Hadoop Docker Image Pip Install Fails

2018-07-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15610?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16548185#comment-16548185 ] Eric Yang commented on HADOOP-15610: [~jackbearden] [~aw] Can we can use Ubuntu 16.04 provided

[jira] [Commented] (HADOOP-15610) Hadoop Docker Image Pip Install Fails

2018-07-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15610?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16548102#comment-16548102 ] Eric Yang commented on HADOOP-15610: I thought pylint might have trouble with python 2, but [pylint

[jira] [Commented] (HADOOP-15610) Hadoop Docker Image Pip Install Fails

2018-07-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15610?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16548075#comment-16548075 ] Eric Yang commented on HADOOP-15610: I think the error is coming from pylint compiled itself

[jira] [Comment Edited] (HADOOP-15610) Hadoop Docker Image Pip Install Fails

2018-07-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15610?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16548039#comment-16548039 ] Eric Yang edited comment on HADOOP-15610 at 7/18/18 4:29 PM: -

[jira] [Commented] (HADOOP-15610) Hadoop Docker Image Pip Install Fails

2018-07-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15610?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16548039#comment-16548039 ] Eric Yang commented on HADOOP-15610: [~jackbearden] Thank you for the patch. This patch can pass

[jira] [Created] (HADOOP-15601) Change yarn.admin.acl setting to be more restricted

2018-07-11 Thread Eric Yang (JIRA)
Eric Yang created HADOOP-15601: -- Summary: Change yarn.admin.acl setting to be more restricted Key: HADOOP-15601 URL: https://issues.apache.org/jira/browse/HADOOP-15601 Project: Hadoop Common

[jira] [Created] (HADOOP-15600) Set default proxy user settings to non-routable IP addresses and default users group

2018-07-11 Thread Eric Yang (JIRA)
Eric Yang created HADOOP-15600: -- Summary: Set default proxy user settings to non-routable IP addresses and default users group Key: HADOOP-15600 URL: https://issues.apache.org/jira/browse/HADOOP-15600

[jira] [Resolved] (HADOOP-15597) UserGroupInformation class throws NPE when Kerberos TGT expired

2018-07-10 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15597?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang resolved HADOOP-15597. Resolution: Duplicate > UserGroupInformation class throws NPE when Kerberos TGT expired >

[jira] [Commented] (HADOOP-15597) UserGroupInformation class throws NPE when Kerberos TGT expired

2018-07-10 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15597?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16539322#comment-16539322 ] Eric Yang commented on HADOOP-15597: [~xyao] Yes, this is a dupe. Close this one. Thank you for

[jira] [Created] (HADOOP-15597) UserGroupInformation class throws NPE when Kerberos TGT expired

2018-07-10 Thread Eric Yang (JIRA)
Eric Yang created HADOOP-15597: -- Summary: UserGroupInformation class throws NPE when Kerberos TGT expired Key: HADOOP-15597 URL: https://issues.apache.org/jira/browse/HADOOP-15597 Project: Hadoop Common

[jira] [Created] (HADOOP-15588) Add proxy acl check for AuthenticationFilter

2018-07-09 Thread Eric Yang (JIRA)
Eric Yang created HADOOP-15588: -- Summary: Add proxy acl check for AuthenticationFilter Key: HADOOP-15588 URL: https://issues.apache.org/jira/browse/HADOOP-15588 Project: Hadoop Common Issue

[jira] [Created] (HADOOP-15587) Securing ASF Hadoop releases out of the box

2018-07-09 Thread Eric Yang (JIRA)
Eric Yang created HADOOP-15587: -- Summary: Securing ASF Hadoop releases out of the box Key: HADOOP-15587 URL: https://issues.apache.org/jira/browse/HADOOP-15587 Project: Hadoop Common Issue

[jira] [Commented] (HADOOP-15527) loop until TIMEOUT before sending kill -9

2018-06-19 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15527?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16517359#comment-16517359 ] Eric Yang commented on HADOOP-15527: [~xiaochen] Good catch, sorry about the wrong location.  This

[jira] [Commented] (HADOOP-15527) loop until TIMEOUT before sending kill -9

2018-06-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15527?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16516130#comment-16516130 ] Eric Yang commented on HADOOP-15527: [~ajisakaa] Thanks for catching the mistake. 

[jira] [Commented] (HADOOP-15527) Sometimes daemons keep running even after "kill -9" from daemon-stop script

2018-06-12 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15527?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16510496#comment-16510496 ] Eric Yang commented on HADOOP-15527: Jenkins failure is due to protoc version mismatch, not caused

[jira] [Updated] (HADOOP-15527) Sometimes daemons keep running even after "kill -9" from daemon-stop script

2018-06-12 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15527?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-15527: --- Resolution: Fixed Fix Version/s: 3.1.1 3.2.0 Status: Resolved

[jira] [Commented] (HADOOP-15527) Sometimes daemons keep running even after "kill -9" from daemon-stop script

2018-06-12 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15527?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16510466#comment-16510466 ] Eric Yang commented on HADOOP-15527: +1 looks good to me. > Sometimes daemons keep running even

[jira] [Commented] (HADOOP-15527) Sometimes daemons keep running even after "kill -9" from daemon-stop script

2018-06-12 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15527?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16510151#comment-16510151 ] Eric Yang commented on HADOOP-15527: {code} timeout=$(printf "%.0f\n" ${timeout}) {code} Can be

[jira] [Commented] (HADOOP-15527) Sometimes daemons keep running even after "kill -9" from daemon-stop script

2018-06-12 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15527?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16509764#comment-16509764 ] Eric Yang commented on HADOOP-15527: In the batch file, hadoop_stop_daemon is renamed to

[jira] [Commented] (HADOOP-15527) Sometimes daemons keep running even after "kill -9" from daemon-stop script

2018-06-11 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15527?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16509044#comment-16509044 ] Eric Yang commented on HADOOP-15527: In JDK 8, there is a new feature to control OS processes,

[jira] [Commented] (HADOOP-15518) Authentication filter calling handler after request already authenticated

2018-06-11 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15518?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16508318#comment-16508318 ] Eric Yang commented on HADOOP-15518: [~sunilg] Multiple AuthenticationFilters configured with

[jira] [Commented] (HADOOP-15518) Authentication filter calling handler after request already authenticated

2018-06-08 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15518?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16506669#comment-16506669 ] Eric Yang commented on HADOOP-15518: There seems to be a problem if multiple filters extended from

[jira] [Commented] (HADOOP-15518) Authentication filter calling handler after request already authenticated

2018-06-08 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15518?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16506506#comment-16506506 ] Eric Yang commented on HADOOP-15518: One foot note about this change. If multiple

[jira] [Updated] (HADOOP-15518) Authentication filter calling handler after request already authenticated

2018-06-08 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15518?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-15518: --- Status: Patch Available (was: Open) > Authentication filter calling handler after request already

[jira] [Commented] (HADOOP-15518) Authentication filter calling handler after request already authenticated

2018-06-07 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15518?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16505081#comment-16505081 ] Eric Yang commented on HADOOP-15518: [~kminder] Race condition is not a criticism of this patch.

[jira] [Commented] (HADOOP-15518) Authentication filter calling handler after request already authenticated

2018-06-07 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15518?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16504999#comment-16504999 ] Eric Yang commented on HADOOP-15518: [~lmccay] {quote}it is unclear to me where the race condition

[jira] [Commented] (HADOOP-15518) Authentication filter calling handler after request already authenticated

2018-06-07 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15518?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16504881#comment-16504881 ] Eric Yang commented on HADOOP-15518: +1 The patch looks good to me. > Authentication filter

[jira] [Commented] (HADOOP-15518) Authentication filter calling handler after request already authenticated

2018-06-07 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15518?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16504877#comment-16504877 ] Eric Yang commented on HADOOP-15518: This is a race condition if multiple instances of

[jira] [Commented] (HADOOP-15284) Could not determine real path of mount

2018-03-02 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15284?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16384323#comment-16384323 ] Eric Yang commented on HADOOP-15284: Filecache might not exist, if the user has never ran any job

[jira] [Created] (HADOOP-15284) Could not determine real path of mount

2018-03-02 Thread Eric Yang (JIRA)
Eric Yang created HADOOP-15284: -- Summary: Could not determine real path of mount Key: HADOOP-15284 URL: https://issues.apache.org/jira/browse/HADOOP-15284 Project: Hadoop Common Issue Type: Bug

[jira] [Updated] (HADOOP-13119) Add ability to secure log servlet using proxy users

2018-02-28 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-13119?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-13119: --- Hadoop Flags: Incompatible change > Add ability to secure log servlet using proxy users >

[jira] [Comment Edited] (HADOOP-15222) Refine proxy user authorization to support multiple ACL list

2018-02-27 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15222?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16379563#comment-16379563 ] Eric Yang edited comment on HADOOP-15222 at 2/28/18 1:12 AM: - Today, hadoop

[jira] [Commented] (HADOOP-15222) Refine proxy user authorization to support multiple ACL list

2018-02-27 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15222?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16379563#comment-16379563 ] Eric Yang commented on HADOOP-15222: Today, hadoop offers two roles, cluster admin, and normal

[jira] [Updated] (HADOOP-15222) Refine proxy user authorization to support multiple ACL list

2018-02-26 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15222?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-15222: --- Description: This Jira is responding to follow up work for HADOOP-14077. The original goal of

[jira] [Commented] (HADOOP-14728) Configuring AuthenticationFilterInitializer throws IllegalArgumentException: Null user

2018-02-26 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-14728?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16377850#comment-16377850 ] Eric Yang commented on HADOOP-14728: Null is not introduced by HADOOP-13119, but HADOOP-14077.

[jira] [Reopened] (HADOOP-14077) Improve the patch of HADOOP-13119

2018-02-13 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-14077?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang reopened HADOOP-14077: > Improve the patch of HADOOP-13119 > - > > Key:

[jira] [Commented] (HADOOP-14077) Improve the patch of HADOOP-13119

2018-02-13 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-14077?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16362666#comment-16362666 ] Eric Yang commented on HADOOP-14077: [~yuanbo] Hadoop Security team has brought to my attention that

[jira] [Commented] (HADOOP-15222) Refine proxy user authorization to support multiple ACL list

2018-02-12 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15222?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16361799#comment-16361799 ] Eric Yang commented on HADOOP-15222: [~lmccay] Sorry, until a better proposal is feasible to secure

[jira] [Commented] (HADOOP-13119) Add ability to secure log servlet using proxy users

2018-02-12 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-13119?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16361794#comment-16361794 ] Eric Yang commented on HADOOP-13119: [~arpitagarwal] the test case is invalid. Your curl command

[jira] [Commented] (HADOOP-15222) Refine proxy user authorization to support multiple ACL list

2018-02-12 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15222?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16361731#comment-16361731 ] Eric Yang commented on HADOOP-15222: [~lmccay] Thank you for the summary. This is aligned with the

[jira] [Created] (HADOOP-15222) Refine proxy user authorization to support multiple ACL list

2018-02-12 Thread Eric Yang (JIRA)
Eric Yang created HADOOP-15222: -- Summary: Refine proxy user authorization to support multiple ACL list Key: HADOOP-15222 URL: https://issues.apache.org/jira/browse/HADOOP-15222 Project: Hadoop Common

[jira] [Resolved] (HADOOP-15162) UserGroupInformation.createRemoteUser hardcode authentication method to SIMPLE

2018-01-10 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15162?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang resolved HADOOP-15162. Resolution: Not A Problem Close this as not a problem. Bad assumption for SIMPLE security mode

[jira] [Commented] (HADOOP-15162) UserGroupInformation.createRemoteUser hardcode authentication method to SIMPLE

2018-01-09 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15162?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16318749#comment-16318749 ] Eric Yang commented on HADOOP-15162: [~daryn] {quote} Are you writing your own custom http server

[jira] [Commented] (HADOOP-15162) UserGroupInformation.createRemoteUser hardcode authentication method to SIMPLE

2018-01-08 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15162?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16317583#comment-16317583 ] Eric Yang commented on HADOOP-15162: [~daryn] Thank you for your reply. {quote} Based on the

[jira] [Commented] (HADOOP-15162) UserGroupInformation.createRemoteUser hardcode authentication method to SIMPLE

2018-01-08 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15162?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16317386#comment-16317386 ] Eric Yang commented on HADOOP-15162: In summary, proxy user ACL should be checked for simple

[jira] [Commented] (HADOOP-15162) UserGroupInformation.createRemoteUser hardcode authentication method to SIMPLE

2018-01-08 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15162?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16316758#comment-16316758 ] Eric Yang commented on HADOOP-15162: Hi [~daryn], {quote} If you have a specific risk case, please

[jira] [Commented] (HADOOP-15162) UserGroupInformation.createRemoteUser hardcode authentication method to SIMPLE

2018-01-08 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15162?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16316725#comment-16316725 ] Eric Yang commented on HADOOP-15162: Hi [~jlowe], Webhdfs and YARN allows impersonation through

[jira] [Created] (HADOOP-15162) UserGroupInformation.createRmoteUser hardcode authentication method to SIMPLE

2018-01-05 Thread Eric Yang (JIRA)
Eric Yang created HADOOP-15162: -- Summary: UserGroupInformation.createRmoteUser hardcode authentication method to SIMPLE Key: HADOOP-15162 URL: https://issues.apache.org/jira/browse/HADOOP-15162 Project:

[jira] [Comment Edited] (HADOOP-15128) TestViewFileSystem tests are broken in trunk

2017-12-19 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15128?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16296316#comment-16296316 ] Eric Yang edited comment on HADOOP-15128 at 12/20/17 1:15 AM: -- In

[jira] [Commented] (HADOOP-15128) TestViewFileSystem tests are broken in trunk

2017-12-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15128?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16296316#comment-16296316 ] Eric Yang commented on HADOOP-15128: In HADOOP-2381, the discussion thread contains good insights

[jira] [Reopened] (HADOOP-10054) ViewFsFileStatus.toString() is broken

2017-12-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10054?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang reopened HADOOP-10054: This patch broke trunk development. Please run unit test: {code} mvn clean test

[jira] [Comment Edited] (HADOOP-15008) Metrics sinks may emit too frequently if multiple sink periods are configured

2017-11-13 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15008?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16249863#comment-16249863 ] Eric Yang edited comment on HADOOP-15008 at 11/13/17 11:39 PM: --- +1

[jira] [Updated] (HADOOP-15008) Metrics sinks may emit too frequently if multiple sink periods are configured

2017-11-13 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15008?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-15008: --- Affects Version/s: 2.2.0 3.0.0-beta1 Hadoop Flags: Incompatible

[jira] [Updated] (HADOOP-15008) Metrics sinks may emit too frequently if multiple sink periods are configured

2017-11-13 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15008?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-15008: --- Resolution: Fixed Status: Resolved (was: Patch Available) I just committed this, Thank you

<    1   2   3   4   5   6   7   8   >