[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-05-10 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16837459#comment-16837459 ] Eric Yang commented on HADOOP-16214: {quote}The auth_to_local rules are and always have served as a

[jira] [Commented] (HADOOP-16287) KerberosAuthenticationHandler Trusted Proxy Support for Knox

2019-05-08 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16287?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16835961#comment-16835961 ] Eric Yang commented on HADOOP-16287: [~daryn] Any concern with patch 4? If not, I will give +1 on

[jira] [Commented] (HADOOP-16287) KerberosAuthenticationHandler Trusted Proxy Support for Knox

2019-05-07 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16287?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16834908#comment-16834908 ] Eric Yang commented on HADOOP-16287: [~Prabhu Joseph] thank you for the patch. Patch 003 has two

[jira] [Commented] (HADOOP-16091) Create hadoop/ozone docker images with inline build process

2019-05-06 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16091?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16834009#comment-16834009 ] Eric Yang commented on HADOOP-16091: {quote}I wouldn't like to create an additional thread here,

[jira] [Comment Edited] (HADOOP-16091) Create hadoop/ozone docker images with inline build process

2019-05-04 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16091?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16833139#comment-16833139 ] Eric Yang edited comment on HADOOP-16091 at 5/4/19 6:39 PM: [~elek]

[jira] [Commented] (HADOOP-16091) Create hadoop/ozone docker images with inline build process

2019-05-04 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16091?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16833139#comment-16833139 ] Eric Yang commented on HADOOP-16091: [~elek] {quote}3. I have some problems with the inline docker

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-05-03 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16832891#comment-16832891 ] Eric Yang commented on HADOOP-16214: [~daryn] {quote}If I were to use RBAC to protect a cluster I'd

[jira] [Commented] (HADOOP-16091) Create hadoop/ozone docker images with inline build process

2019-05-03 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16091?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16832813#comment-16832813 ] Eric Yang commented on HADOOP-16091: One notable difference is the location of ozone binary in

[jira] [Updated] (HADOOP-16091) Create hadoop/ozone docker images with inline build process

2019-05-03 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16091?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16091: --- Attachment: HADOOP-16091.002.patch > Create hadoop/ozone docker images with inline build process >

[jira] [Commented] (HADOOP-16091) Create hadoop/ozone docker images with inline build process

2019-05-03 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16091?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16832800#comment-16832800 ] Eric Yang commented on HADOOP-16091: Patch 002 includes the following changes: # Make sure Ozone

[jira] [Updated] (HADOOP-16091) Create hadoop/ozone docker images with inline build process

2019-05-03 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16091?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16091: --- Attachment: HADOOP-16091.001.patch > Create hadoop/ozone docker images with inline build process >

[jira] [Updated] (HADOOP-16091) Create hadoop/ozone docker images with inline build process

2019-05-03 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16091?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16091: --- Assignee: Eric Yang Status: Patch Available (was: Open) > Create hadoop/ozone docker images

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-05-03 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16832648#comment-16832648 ] Eric Yang commented on HADOOP-16214: Patch 13 fixed null pointer exception for rule mechanism is

[jira] [Updated] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-05-03 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16214: --- Attachment: HADOOP-16214.013.patch > Kerberos name implementation in Hadoop does not accept

[jira] [Commented] (HADOOP-16287) KerberosAuthenticationHandler Trusted Proxy Support for Knox

2019-05-03 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16287?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16832604#comment-16832604 ] Eric Yang commented on HADOOP-16287: It would be best to ensure that respond of servers are

[jira] [Commented] (HADOOP-16287) KerberosAuthenticationHandler Trusted Proxy Support for Knox

2019-05-03 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16287?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16832601#comment-16832601 ] Eric Yang commented on HADOOP-16287: [~daryn] {quote}-1 on returning a new auth cookie as the

[jira] [Updated] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-05-02 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16214: --- Attachment: HADOOP-16214.012.patch > Kerberos name implementation in Hadoop does not accept

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-05-01 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16831275#comment-16831275 ] Eric Yang commented on HADOOP-16214: [~ibuenros] I will update the patch to check for MIT rule

[jira] [Updated] (HADOOP-16283) Error in reading Kerberos principals from the Keytab file

2019-05-01 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16283?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16283: --- Component/s: security > Error in reading Kerberos principals from the Keytab file >

[jira] [Comment Edited] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-26 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16827192#comment-16827192 ] Eric Yang edited comment on HADOOP-16214 at 4/26/19 6:42 PM: - [~ibuenros] 

[jira] [Comment Edited] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-26 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16827192#comment-16827192 ] Eric Yang edited comment on HADOOP-16214 at 4/26/19 6:41 PM: - [~ibuenros] 

[jira] [Comment Edited] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-26 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16827192#comment-16827192 ] Eric Yang edited comment on HADOOP-16214 at 4/26/19 6:36 PM: - [~ibuenros] 

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-26 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16827192#comment-16827192 ] Eric Yang commented on HADOOP-16214: [~ibuenros] {quote}Is it the case that adding more components

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-26 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16827146#comment-16827146 ] Eric Yang commented on HADOOP-16214: [~ibuenros] {quote}NN and other base Hadoop components will

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-19 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=1680#comment-1680 ] Eric Yang commented on HADOOP-16214: See the attached screenshot for add service principal for

[jira] [Updated] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-19 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16214: --- Attachment: Add-service-freeipa.png > Kerberos name implementation in Hadoop does not accept

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-19 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16822212#comment-16822212 ] Eric Yang commented on HADOOP-16214: [~owen.omalley] FreeIPA does not allow creation of service

[jira] [Comment Edited] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-17 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16815640#comment-16815640 ] Eric Yang edited comment on HADOOP-16214 at 4/18/19 1:03 AM: - [~daryn] I

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-16 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16819582#comment-16819582 ] Eric Yang commented on HADOOP-16214: cc [~bolke] [~tucu00] [~kzhang] [~atm] [~owen.omalley] Please

[jira] [Comment Edited] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-16 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16819548#comment-16819548 ] Eric Yang edited comment on HADOOP-16214 at 4/16/19 10:51 PM: -- [~daryn]

[jira] [Comment Edited] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-16 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16819548#comment-16819548 ] Eric Yang edited comment on HADOOP-16214 at 4/16/19 10:37 PM: -- [~daryn]

[jira] [Comment Edited] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-16 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16819548#comment-16819548 ] Eric Yang edited comment on HADOOP-16214 at 4/16/19 10:36 PM: -- [~daryn]

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-16 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16819548#comment-16819548 ] Eric Yang commented on HADOOP-16214: [~daryn] daryn/@REALM and daryn/ipv6-host@REALM are legal

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-16 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16819528#comment-16819528 ] Eric Yang commented on HADOOP-16214: In simple security, identity that looks like:

[jira] [Comment Edited] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-16 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16819298#comment-16819298 ] Eric Yang edited comment on HADOOP-16214 at 4/16/19 5:23 PM: - [~xkrogen]

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-16 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16819298#comment-16819298 ] Eric Yang commented on HADOOP-16214: [~xkrogen] Daryn originally stated two incompatibility. #

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-15 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16818268#comment-16818268 ] Eric Yang commented on HADOOP-16214: [~daryn] Java standard regex doesn't support recursion regex.

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-11 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16815841#comment-16815841 ] Eric Yang commented on HADOOP-16214: {quote}How to do this with no risk of incompatibility? Extend

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-11 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16815775#comment-16815775 ] Eric Yang commented on HADOOP-16214: Patch 11 fixed checkstyle issue from patch 10. > Kerberos

[jira] [Updated] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-11 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16214: --- Attachment: HADOOP-16214.011.patch > Kerberos name implementation in Hadoop does not accept

[jira] [Commented] (HADOOP-16023) Support system /etc/krb5.conf for auth_to_local rules

2019-04-11 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16023?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16815756#comment-16815756 ] Eric Yang commented on HADOOP-16023: {quote}Gotcha. Is it worth adding an extra config item that

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-11 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16815695#comment-16815695 ] Eric Yang commented on HADOOP-16214: Patch 10 is based on patch 8 with rename of serviceName to

[jira] [Updated] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-11 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16214: --- Attachment: HADOOP-16214.010.patch > Kerberos name implementation in Hadoop does not accept

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-11 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16815640#comment-16815640 ] Eric Yang commented on HADOOP-16214: [~daryn] I think I overlooked the result of testing regex in

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-10 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16814916#comment-16814916 ] Eric Yang commented on HADOOP-16214: [~ibuenros] Thank you for the tests. > Kerberos name

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-10 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16814831#comment-16814831 ] Eric Yang commented on HADOOP-16214: [~daryn] {quote}By design, the regexp previously rejected

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-10 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16814750#comment-16814750 ] Eric Yang commented on HADOOP-16214: [~ibuenros] Perfect, let us know if patch 8 works for you.

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-10 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16814737#comment-16814737 ] Eric Yang commented on HADOOP-16214: [~daryn] Patch 9 doesn't follow RFC correctly. Service with

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-10 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16814711#comment-16814711 ] Eric Yang commented on HADOOP-16214: [~ibuenros] This applies to both with realm or without realm.

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-10 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16814622#comment-16814622 ] Eric Yang commented on HADOOP-16214: [~ibuenros] [~xkrogen] Please verify: {quote}

[jira] [Comment Edited] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-09 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16813866#comment-16813866 ] Eric Yang edited comment on HADOOP-16214 at 4/9/19 11:11 PM: -

[jira] [Comment Edited] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-09 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16813866#comment-16813866 ] Eric Yang edited comment on HADOOP-16214 at 4/9/19 11:08 PM: -

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-09 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16813866#comment-16813866 ] Eric Yang commented on HADOOP-16214: {quote}Putting forth the argument that a 2+ component

[jira] [Commented] (HADOOP-16023) Support system /etc/krb5.conf for auth_to_local rules

2019-04-09 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16023?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16813616#comment-16813616 ] Eric Yang commented on HADOOP-16023: [~daryn] When RM's hadoop auth_to_local, maps johnSmith to

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-09 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16813602#comment-16813602 ] Eric Yang commented on HADOOP-16214: [~daryn] KerberosName class is used for both parsing the

[jira] [Comment Edited] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-08 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16812909#comment-16812909 ] Eric Yang edited comment on HADOOP-16214 at 4/9/19 1:09 AM: [~daryn] In

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-08 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16812909#comment-16812909 ] Eric Yang commented on HADOOP-16214: [~daryn] In Linux, HTTP/abc.com isn't a valid name, where

[jira] [Updated] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-08 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16214: --- Attachment: HADOOP-16214.008.patch > Kerberos name implementation in Hadoop does not accept

[jira] [Updated] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-08 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16214: --- Attachment: HADOOP-16214.007.patch > Kerberos name implementation in Hadoop does not accept

[jira] [Commented] (HADOOP-16023) Support system /etc/krb5.conf for auth_to_local rules

2019-04-08 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16023?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16812863#comment-16812863 ] Eric Yang commented on HADOOP-16023: [~daryn] auth_to_local maps the user name to unix name. When

[jira] [Commented] (HADOOP-16023) Support system /etc/krb5.conf for auth_to_local rules

2019-04-08 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16023?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16812627#comment-16812627 ] Eric Yang commented on HADOOP-16023: [~bolke] The current MIT rule mechanism isn't behave exactly

[jira] [Commented] (HADOOP-16023) Support system /etc/krb5.conf for auth_to_local rules

2019-04-08 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16023?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16812596#comment-16812596 ] Eric Yang commented on HADOOP-16023: {quote}Our krb5.conf auth_to_local rules never match the

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-08 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16812570#comment-16812570 ] Eric Yang commented on HADOOP-16214: [~daryn] The test cases were bad. It disallow multiple

[jira] [Commented] (HADOOP-16023) Support system /etc/krb5.conf for auth_to_local rules

2019-04-07 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16023?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16811960#comment-16811960 ] Eric Yang commented on HADOOP-16023: [~bolke] Hadoop only supports lower case username, therefore,

[jira] [Commented] (HADOOP-16236) Update C code to run with c99 standard

2019-04-03 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16236?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16809007#comment-16809007 ] Eric Yang commented on HADOOP-16236: Free software foundation consider ASL 2.0 compatible with

[jira] [Created] (HADOOP-16236) Update C code to run with c99 standard

2019-04-03 Thread Eric Yang (JIRA)
Eric Yang created HADOOP-16236: -- Summary: Update C code to run with c99 standard Key: HADOOP-16236 URL: https://issues.apache.org/jira/browse/HADOOP-16236 Project: Hadoop Common Issue Type:

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-02 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16808001#comment-16808001 ] Eric Yang commented on HADOOP-16214: [~xkrogen] [~ibuenros] [~ste...@apache.org], I think this

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-01 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16807244#comment-16807244 ] Eric Yang commented on HADOOP-16214: Patch 6 fixed white space. > Kerberos name implementation in

[jira] [Updated] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-01 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16214: --- Attachment: HADOOP-16214.006.patch > Kerberos name implementation in Hadoop does not accept

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-01 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16807143#comment-16807143 ] Eric Yang commented on HADOOP-16214: Patch 005 fixed a bug in auth_to_local rules processing where

[jira] [Updated] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-04-01 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16214: --- Attachment: HADOOP-16214.005.patch > Kerberos name implementation in Hadoop does not accept

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-03-29 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16805571#comment-16805571 ] Eric Yang commented on HADOOP-16214: Patch 4 make adjustment for simple security to work. >

[jira] [Updated] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-03-29 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16214: --- Attachment: HADOOP-16214.004.patch > Kerberos name implementation in Hadoop does not accept

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-03-29 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16805427#comment-16805427 ] Eric Yang commented on HADOOP-16214: Patch 3 is the more technically correct solution that we

[jira] [Updated] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-03-29 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16214: --- Attachment: HADOOP-16214.003.patch > Kerberos name implementation in Hadoop does not accept

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-03-29 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16805322#comment-16805322 ] Eric Yang commented on HADOOP-16214: Not sure what is wrong with shaded client on Jenkins build.

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-03-28 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16804440#comment-16804440 ] Eric Yang commented on HADOOP-16214: Patch 001 does not allow empty kerberos name. Patch 002

[jira] [Updated] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-03-28 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16214: --- Attachment: HADOOP-16214.002.patch > Kerberos name implementation in Hadoop does not accept

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-03-28 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16804339#comment-16804339 ] Eric Yang commented on HADOOP-16214: Patch 1 supports multiple components by validating name format

[jira] [Updated] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-03-28 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16214: --- Attachment: HADOOP-16214.001.patch > Kerberos name implementation in Hadoop does not accept

[jira] [Updated] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-03-28 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16214: --- Status: Patch Available (was: Open) > Kerberos name implementation in Hadoop does not accept

[jira] [Commented] (HADOOP-16214) Kerberos name implementation in Hadoop does not accept principals with more than two components

2019-03-27 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16803096#comment-16803096 ] Eric Yang commented on HADOOP-16214: RFC1510 briefly describes multiple components is allowed, and

[jira] [Updated] (HADOOP-16167) "hadoop CLASSFILE" prints error messages on Ubuntu 18

2019-03-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16167?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16167: --- Resolution: Fixed Fix Version/s: 3.3.0 Status: Resolved (was: Patch Available)

[jira] [Commented] (HADOOP-16167) "hadoop CLASSFILE" prints error messages on Ubuntu 18

2019-03-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16167?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16795209#comment-16795209 ] Eric Yang commented on HADOOP-16167: [~templedf] Thanks for the pointer. +1, Patch 004 looks good

[jira] [Comment Edited] (HADOOP-14898) Create official Docker images for development and testing features

2019-03-15 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-14898?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16794070#comment-16794070 ] Eric Yang edited comment on HADOOP-14898 at 3/16/19 1:18 AM: - A couple nice

[jira] [Commented] (HADOOP-14898) Create official Docker images for development and testing features

2019-03-15 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-14898?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16794070#comment-16794070 ] Eric Yang commented on HADOOP-14898: A couple nice to have, use local dist project tarball instead

[jira] [Commented] (HADOOP-16167) "hadoop CLASSFILE" prints error messages on Ubuntu 18

2019-03-15 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16167?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16793996#comment-16793996 ] Eric Yang commented on HADOOP-16167: Patch 003 and 004 are identical. Not sure why Yetus produced

[jira] [Comment Edited] (HADOOP-16167) "hadoop CLASSFILE" prints error messages on Ubuntu 18

2019-03-13 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16167?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16791873#comment-16791873 ] Eric Yang edited comment on HADOOP-16167 at 3/13/19 4:52 PM: -

[jira] [Commented] (HADOOP-16167) "hadoop CLASSFILE" prints error messages on Ubuntu 18

2019-03-13 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16167?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16791873#comment-16791873 ] Eric Yang commented on HADOOP-16167: Hadoop_subcommand unit test is failing in Jenkins using

[jira] [Commented] (HADOOP-16167) "hadoop CLASSFILE" prints error messages on Ubuntu 18

2019-03-07 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16167?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16787091#comment-16787091 ] Eric Yang commented on HADOOP-16167: {quote}Citation needed. I've never seen the usage of indirects

[jira] [Commented] (HADOOP-16167) "hadoop CLASSFILE" prints error messages on Ubuntu 18

2019-03-05 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16167?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16785028#comment-16785028 ] Eric Yang commented on HADOOP-16167: [~templedf] The patch fixes the problem described in this

[jira] [Updated] (HADOOP-16150) checksumFS doesn't wrap concat(): concatenated files don't have checksums

2019-03-05 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16150?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16150: --- Resolution: Fixed Fix Version/s: 3.3.0 Status: Resolved (was: Patch Available)

[jira] [Commented] (HADOOP-16167) "hadoop CLASSFILE" prints error messages on Ubuntu 18

2019-03-04 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16167?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16783958#comment-16783958 ] Eric Yang commented on HADOOP-16167: Hadoop shell script uses indirection technique to evaluate and

[jira] [Commented] (HADOOP-16150) checksumFS doesn't wrap concat(): concatenated files don't have checksums

2019-02-28 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16150?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16781144#comment-16781144 ] Eric Yang commented on HADOOP-16150: +1 > checksumFS doesn't wrap concat(): concatenated files

[jira] [Commented] (HADOOP-16150) checksumFS doesn't wrap concat(): concatenated files don't have checksums

2019-02-28 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16150?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16780841#comment-16780841 ] Eric Yang commented on HADOOP-16150: [~ste...@apache.org], in Hadoop wiki [create a github pull

[jira] [Updated] (HADOOP-16150) checksumFS doesn't wrap concat(): concatenated files don't have checksums

2019-02-28 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16150?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16150: --- Assignee: Steve Loughran Status: Patch Available (was: Open) > checksumFS doesn't wrap

[jira] [Commented] (HADOOP-16150) checksumFS doesn't wrap concat(): concatenated files don't have checksums

2019-02-27 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16150?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16779901#comment-16779901 ] Eric Yang commented on HADOOP-16150: [~ste...@apache.org] Pull request link doesn't seem to include

[jira] [Comment Edited] (HADOOP-16107) FilterFileSystem doesn't wrap all create() or new builder calls; may skip CRC logic

2019-02-27 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16107?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16779761#comment-16779761 ] Eric Yang edited comment on HADOOP-16107 at 2/27/19 9:01 PM: - +1 Thank you

[jira] [Updated] (HADOOP-16107) FilterFileSystem doesn't wrap all create() or new builder calls; may skip CRC logic

2019-02-27 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16107?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated HADOOP-16107: --- Resolution: Fixed Fix Version/s: 3.3.0 Status: Resolved (was: Patch Available)

[jira] [Comment Edited] (HADOOP-16107) FilterFileSystem doesn't wrap all create() or new builder calls; may skip CRC logic

2019-02-27 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16107?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16779761#comment-16779761 ] Eric Yang edited comment on HADOOP-16107 at 2/27/19 8:58 PM: - +1 Thank you

<    1   2   3   4   5   6   7   8   >