[jira] [Commented] (HADOOP-18618) Support custom property for credential provider path

2023-02-06 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18618?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17684972#comment-17684972 ] Larry McCay commented on HADOOP-18618: -- Yes, this is a tricky area and in practice there are

[jira] [Commented] (HADOOP-18235) vulnerability: we may leak sensitive information in LocalKeyStoreProvider

2022-10-11 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18235?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17615991#comment-17615991 ] Larry McCay commented on HADOOP-18235: -- [~clayb] - I do not recall what the issue was - it was 7+

[jira] [Commented] (HADOOP-18235) vulnerability: we may leak sensitive information in LocalKeyStoreProvider

2022-10-10 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18235?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17615271#comment-17615271 ] Larry McCay commented on HADOOP-18235: -- [~clayb] - thanks for the PR here! I added a review

[jira] [Updated] (HADOOP-18388) Allow dynamic groupSearchFilter in LdapGroupsMapping

2022-09-06 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18388?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated HADOOP-18388: - Labels: Reviewed pull-request-available (was: pull-request-available) > Allow dynamic

[jira] [Assigned] (HADOOP-18388) Allow dynamic groupSearchFilter in LdapGroupsMapping

2022-08-23 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18388?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay reassigned HADOOP-18388: Assignee: Ayush Saxena > Allow dynamic groupSearchFilter in LdapGroupsMapping >

[jira] [Commented] (HADOOP-18388) Allow dynamic groupSearchFilter in LdapGroupsMapping

2022-08-23 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18388?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17583753#comment-17583753 ] Larry McCay commented on HADOOP-18388: -- [~ayushtkn] - thank you for the patch. I'd like to see a

[jira] [Commented] (HADOOP-18388) Allow dynamic groupSearchFilter in LdapGroupsMapping

2022-08-18 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18388?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17581189#comment-17581189 ] Larry McCay commented on HADOOP-18388: -- [~ayushtkn] - have you a change in mind here? Have you

[jira] [Updated] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

2022-07-14 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated HADOOP-18074: - Labels: Reviewed pull-request-available (was: pull-request-available) > Partial/Incomplete

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

2022-07-11 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17565139#comment-17565139 ] Larry McCay commented on HADOOP-18074: -- [~ste...@apache.org] - I haven't done the CP yet, wanted

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

2022-07-11 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17565128#comment-17565128 ] Larry McCay commented on HADOOP-18074: -- Oh, okay, I can do it then. The contribution page seemed

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

2022-07-11 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17565107#comment-17565107 ] Larry McCay commented on HADOOP-18074: -- [~ste...@apache.org] - I have addressed your review

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

2022-06-25 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17558811#comment-17558811 ] Larry McCay commented on HADOOP-18074: -- https://github.com/apache/hadoop/pull/4503 created. >

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

2022-06-25 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17558804#comment-17558804 ] Larry McCay commented on HADOOP-18074: -- There appears to be a couple problems in this code

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

2022-06-25 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17558790#comment-17558790 ] Larry McCay commented on HADOOP-18074: -- [~ste...@apache.org] - being that this is a common utility

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

2022-06-21 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17557139#comment-17557139 ] Larry McCay commented on HADOOP-18074: -- [~ste...@apache.org] - I've set Target Version to 3.3.4 -

[jira] [Assigned] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

2022-06-21 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay reassigned HADOOP-18074: Target Version/s: 3.3.4 Assignee: Larry McCay > Partial/Incomplete groups

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

2022-06-21 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17557064#comment-17557064 ] Larry McCay commented on HADOOP-18074: -- [~ste...@apache.org] - I do believe there is a security

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

2022-06-20 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17556554#comment-17556554 ] Larry McCay commented on HADOOP-18074: -- [~ste...@apache.org] - I'd like to get this into 3.3.4 -

[jira] [Commented] (HADOOP-18074) Partial/Incomplete groups list can be returned in LDAP groups lookup

2022-01-10 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17472156#comment-17472156 ] Larry McCay commented on HADOOP-18074: -- Hi [~planoe] - do you plan to submit a PR for this change?

[jira] [Commented] (HADOOP-18030) Authentication cookie will never expire by default after HADOOP-12049

2021-12-06 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18030?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17454189#comment-17454189 ] Larry McCay commented on HADOOP-18030: -- Hi [~lalapala] - let's see how to unpack this... 1. The

[jira] [Commented] (HADOOP-18030) Authentication cookie will never expire by default after HADOOP-12049

2021-12-03 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18030?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17453153#comment-17453153 ] Larry McCay commented on HADOOP-18030: -- [~lalapala] - i'm sorry, can you provide more details on

[jira] [Commented] (HADOOP-18030) Authentication cookie will never expire by default after HADOOP-12049

2021-12-02 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-18030?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17452569#comment-17452569 ] Larry McCay commented on HADOOP-18030: -- [~lalapala] - this JIRA seems to articulate exactly what

[jira] [Deleted] (HADOOP-16736) Best Big data hadoop training in pune

2019-11-28 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-16736?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay deleted HADOOP-16736: - > Best Big data hadoop training in pune > - > >

[jira] [Resolved] (HADOOP-16736) Best Big data hadoop training in pune

2019-11-28 Thread Larry McCay (Jira)
[ https://issues.apache.org/jira/browse/HADOOP-16736?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay resolved HADOOP-16736. -- Resolution: Invalid This is spam - resolving as Invalid. > Best Big data hadoop training in

[jira] [Commented] (HADOOP-16340) ABFS driver continues to retry on IOException responses from REST operations

2019-06-19 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16340?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16867688#comment-16867688 ] Larry McCay commented on HADOOP-16340: -- [~ste...@apache.org] , [~DanielZhou] - Where are we on the

[jira] [Commented] (HADOOP-16287) KerberosAuthenticationHandler Trusted Proxy Support for Knox

2019-05-16 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16287?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16841753#comment-16841753 ] Larry McCay commented on HADOOP-16287: -- [~daryn] - I see no difference between what is provided

[jira] [Commented] (HADOOP-16105) WASB in secure mode does not set connectingUsingSAS

2019-02-20 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16105?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16773373#comment-16773373 ] Larry McCay commented on HADOOP-16105: -- [~ste...@apache.org] - This looks straight forward enough

[jira] [Commented] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

2019-02-04 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16760031#comment-16760031 ] Larry McCay commented on HADOOP-16076: -- [~eyang] - internal testing seems to be good with this

[jira] [Commented] (HADOOP-16079) Token.toString faulting if any token listed can't load.

2019-01-31 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16079?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16757562#comment-16757562 ] Larry McCay commented on HADOOP-16079: -- [~ste...@apache.org] - this seems an appropriate change to

[jira] [Updated] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

2019-01-28 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated HADOOP-16076: - Attachment: HADOOP-16076-01.patch > SPNEGO+SSL Client Connections with HttpClient Broken >

[jira] [Updated] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

2019-01-28 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated HADOOP-16076: - Status: Patch Available (was: Open) > SPNEGO+SSL Client Connections with HttpClient Broken >

[jira] [Updated] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

2019-01-28 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated HADOOP-16076: - Attachment: (was: HADOOP-16076-01.patch) > SPNEGO+SSL Client Connections with HttpClient

[jira] [Commented] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

2019-01-28 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16754333#comment-16754333 ] Larry McCay commented on HADOOP-16076: -- [~eyang] - yes, I created the patch from the wrong repo.

[jira] [Updated] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

2019-01-28 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated HADOOP-16076: - Status: Open (was: Patch Available) > SPNEGO+SSL Client Connections with HttpClient Broken >

[jira] [Updated] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

2019-01-28 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated HADOOP-16076: - Status: Patch Available (was: Open) > SPNEGO+SSL Client Connections with HttpClient Broken >

[jira] [Updated] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

2019-01-28 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay updated HADOOP-16076: - Attachment: HADOOP-16076-01.patch > SPNEGO+SSL Client Connections with HttpClient Broken >

[jira] [Commented] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

2019-01-27 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16753543#comment-16753543 ] Larry McCay commented on HADOOP-16076: -- [~ste...@apache.org] - will do. > SPNEGO+SSL Client

[jira] [Commented] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

2019-01-26 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16753104#comment-16753104 ] Larry McCay commented on HADOOP-16076: -- Knox has been using: 4.5.6 4.4.10 There

[jira] [Created] (HADOOP-16076) SPNEGO+SSL Client Connections with HttpClient Broken

2019-01-25 Thread Larry McCay (JIRA)
Larry McCay created HADOOP-16076: Summary: SPNEGO+SSL Client Connections with HttpClient Broken Key: HADOOP-16076 URL: https://issues.apache.org/jira/browse/HADOOP-16076 Project: Hadoop Common

[jira] [Commented] (HADOOP-16064) Load configuration values from external sources

2019-01-25 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-16064?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16752582#comment-16752582 ] Larry McCay commented on HADOOP-16064: -- Thanks for pointing me to this [~ste...@apache.org]. I do

[jira] [Commented] (HADOOP-15996) Plugin interface to support more complex usernames in Hadoop

2019-01-08 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15996?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16737291#comment-16737291 ] Larry McCay commented on HADOOP-15996: -- [~daryn] - welcome back and Happy New Year! It would be

[jira] [Commented] (HADOOP-14556) S3A to support Delegation Tokens

2019-01-06 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-14556?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16735247#comment-16735247 ] Larry McCay commented on HADOOP-14556: -- Thanks for the insights and changes, [~ste...@apache.org].

[jira] [Commented] (HADOOP-15996) Plugin interface to support more complex usernames in Hadoop

2019-01-02 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15996?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16732216#comment-16732216 ] Larry McCay commented on HADOOP-15996: -- Patch 12 looks good to me as well.  Here is my +1.

[jira] [Commented] (HADOOP-14556) S3A to support Delegation Tokens

2018-12-30 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-14556?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16731063#comment-16731063 ] Larry McCay commented on HADOOP-14556: -- Hi [~ste...@apache.org] - I have finally gotten through

[jira] [Commented] (HADOOP-15996) Plugin interface to support more complex usernames in Hadoop

2018-12-29 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15996?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16730851#comment-16730851 ] Larry McCay commented on HADOOP-15996: -- It seems the patch is still using "legacy" - isn't this

[jira] [Commented] (HADOOP-15996) Plugin interface to support more complex usernames in Hadoop

2018-12-28 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15996?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16730452#comment-16730452 ] Larry McCay commented on HADOOP-15996: -- [~bolke] - then make the names be what they are. Compat is

[jira] [Commented] (HADOOP-15996) Plugin interface to support more complex usernames in Hadoop

2018-12-27 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15996?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16729855#comment-16729855 ] Larry McCay commented on HADOOP-15996: -- I don't understand the explanation of the compatibility

[jira] [Commented] (HADOOP-15996) Plugin interface to support more complex usernames in Hadoop

2018-12-19 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15996?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16725380#comment-16725380 ] Larry McCay commented on HADOOP-15996: -- [~bolke] - I can certainly see this being a reasonable

[jira] [Commented] (HADOOP-15995) Add ldap.bind.password.alias in LdapGroupsMapping to distinguish aliases when using multiple providers through CompositeGroupsMapping

2018-12-11 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15995?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16718323#comment-16718323 ] Larry McCay commented on HADOOP-15995: -- Assuming that testConfGetPassword provides test coverage

[jira] [Commented] (HADOOP-15808) Harden Token service loader use

2018-12-11 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15808?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16717616#comment-16717616 ] Larry McCay commented on HADOOP-15808: -- Okay, very good, [~ste...@apache.org]. +1 on the patch as

[jira] [Commented] (HADOOP-15995) LdapGroupsMapping should use the bind.password config value as credential alias

2018-12-10 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15995?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16715577#comment-16715577 ] Larry McCay commented on HADOOP-15995: -- +1 - that sounds better. > LdapGroupsMapping should use

[jira] [Commented] (HADOOP-15995) LdapGroupsMapping should use the bind.password config value as credential alias

2018-12-10 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15995?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16715548#comment-16715548 ] Larry McCay commented on HADOOP-15995: -- Hi [~lukmajercak] - can you explain why the current

[jira] [Commented] (HADOOP-15995) LdapGroupsMapping should use the bind.password config value as credential alias

2018-12-10 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15995?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16715560#comment-16715560 ] Larry McCay commented on HADOOP-15995: -- I see [~lukmajercak], so can we make a change where we add

[jira] [Comment Edited] (HADOOP-15995) LdapGroupsMapping should use the bind.password config value as credential alias

2018-12-10 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15995?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16715548#comment-16715548 ] Larry McCay edited comment on HADOOP-15995 at 12/10/18 9:03 PM: Hi

[jira] [Comment Edited] (HADOOP-15995) LdapGroupsMapping should use the bind.password config value as credential alias

2018-12-10 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15995?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16715548#comment-16715548 ] Larry McCay edited comment on HADOOP-15995 at 12/10/18 9:01 PM: Hi

[jira] [Commented] (HADOOP-15808) Harden Token service loader use

2018-12-10 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15808?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16715232#comment-16715232 ] Larry McCay commented on HADOOP-15808: -- [~ste...@apache.org] - what is the difference between no

[jira] [Commented] (HADOOP-15966) Hadoop Kerberos broken on macos as java.security.krb5.realm is reset

2018-12-03 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15966?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16707645#comment-16707645 ] Larry McCay commented on HADOOP-15966: -- Lack of tests doesn't seem like it should be an issue for

[jira] [Commented] (HADOOP-15955) declare that fs.s3a.ext. is a prefix for arbitrary extensions

2018-11-29 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15955?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16703572#comment-16703572 ] Larry McCay commented on HADOOP-15955: -- This makes sense, especially given the extensibility built

[jira] [Commented] (HADOOP-15952) Secure Key Handling Option with TPM2

2018-11-27 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15952?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16700965#comment-16700965 ] Larry McCay commented on HADOOP-15952: -- [~ste...@apache.org] - I saw this. Thanks for pointing it

[jira] [Commented] (HADOOP-14556) S3A to support Delegation Tokens

2018-11-27 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-14556?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16700677#comment-16700677 ] Larry McCay commented on HADOOP-14556: -- [~ste...@apache.org] - thanks for considering that! In

[jira] [Commented] (HADOOP-15896) Refine Kerberos based AuthenticationHandler to check proxyuser ACL

2018-11-02 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15896?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16673559#comment-16673559 ] Larry McCay commented on HADOOP-15896: -- JWTRedirectAuthenticationHandler is not specific to proxy

[jira] [Commented] (HADOOP-15855) Review hadoop credential doc, including object store details

2018-10-29 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15855?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16667771#comment-16667771 ] Larry McCay commented on HADOOP-15855: -- LGTM +1 > Review hadoop credential doc, including object

[jira] [Commented] (HADOOP-15855) Review hadoop credential doc, including object store details

2018-10-15 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15855?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16650972#comment-16650972 ] Larry McCay commented on HADOOP-15855: -- {code} +To wrap a filesystem URIs with a `jceks` URI

[jira] [Commented] (HADOOP-15839) Review + update cloud store sensitive keys in hadoop.security.sensitive-config-keys

2018-10-11 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15839?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16646589#comment-16646589 ] Larry McCay commented on HADOOP-15839: -- We do have support for some of these at least to not be in

[jira] [Commented] (HADOOP-15839) Review + update cloud store sensitive keys in hadoop.security.sensitive-config-keys

2018-10-10 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15839?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16645068#comment-16645068 ] Larry McCay commented on HADOOP-15839: -- [~ste...@apache.org] - this LGTM... +1 > Review + update

[jira] [Commented] (HADOOP-15687) Credentials class should allow access to aliases

2018-08-22 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15687?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16588923#comment-16588923 ] Larry McCay commented on HADOOP-15687: -- Hi [~lars_francke] - thanks for the clarifications. That

[jira] [Commented] (HADOOP-15687) Credentials class should allow access to aliases

2018-08-21 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15687?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16588151#comment-16588151 ] Larry McCay commented on HADOOP-15687: -- Thanks, [~ste...@apache.org]. [~lars_francke] - can you

[jira] [Comment Edited] (HADOOP-15583) Stabilize S3A Assumed Role support

2018-08-08 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16574202#comment-16574202 ] Larry McCay edited comment on HADOOP-15583 at 8/9/18 2:42 AM: -- After

[jira] [Commented] (HADOOP-15583) Stabilize S3A Assumed Role support

2018-08-08 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16574202#comment-16574202 ] Larry McCay commented on HADOOP-15583: -- After complete review, this LGTM once you address the

[jira] [Commented] (HADOOP-15583) Stabilize S3A Assumed Role support

2018-08-06 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16571048#comment-16571048 ] Larry McCay commented on HADOOP-15583: -- Couple more nits... * AWSCredentialProviderList.java -

[jira] [Commented] (HADOOP-15583) Stabilize S3A Assumed Role support

2018-08-06 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16570977#comment-16570977 ] Larry McCay commented on HADOOP-15583: -- Hi [~ste...@apache.org] - I thought STS was Security Token

[jira] [Commented] (HADOOP-15642) Update to latest/recent version of aws-sdk for Hadoop 3.2

2018-08-06 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15642?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16570955#comment-16570955 ] Larry McCay commented on HADOOP-15642: -- LGTM - +1 I like the idea of documenting the upgrade

[jira] [Comment Edited] (HADOOP-15642) Update to latest/recent version of aws-sdk for Hadoop 3.2

2018-08-06 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15642?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16570955#comment-16570955 ] Larry McCay edited comment on HADOOP-15642 at 8/7/18 12:17 AM: ---

[jira] [Commented] (HADOOP-15518) Authentication filter calling handler after request already authenticated

2018-06-07 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15518?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16504893#comment-16504893 ] Larry McCay commented on HADOOP-15518: -- [~eyang] - it is unclear to me where the race condition

[jira] [Assigned] (HADOOP-15518) Authentication filter calling handler after request already authenticated

2018-06-07 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15518?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay reassigned HADOOP-15518: Assignee: Kevin Minder > Authentication filter calling handler after request already

[jira] [Commented] (HADOOP-15405) adl:// to stop using Configuration.getPassword() to look up fs.adl.oauth2.refresh.url

2018-04-24 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15405?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16450061#comment-16450061 ] Larry McCay commented on HADOOP-15405: -- Thanks for pointing this out, [~ste...@apache.org]. I

[jira] [Commented] (HADOOP-15357) Configuration.getPropsWithPrefix no longer does variable substitution

2018-04-06 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15357?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16428702#comment-16428702 ] Larry McCay commented on HADOOP-15357: -- I supposed the fact that get() is already tested for

[jira] [Commented] (HADOOP-15357) Configuration.getPropsWithPrefix no longer does variable substitution

2018-04-04 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15357?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16426094#comment-16426094 ] Larry McCay commented on HADOOP-15357: -- I don't disagree - that is not to say that I know that we

[jira] [Commented] (HADOOP-15357) Configuration.getPropsWithPrefix no longer does variable substitution

2018-04-04 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15357?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16425973#comment-16425973 ] Larry McCay commented on HADOOP-15357: -- Hi [~Jim_Brennan] - the patch looks good. I notice that

[jira] [Commented] (HADOOP-15357) Configuration.getPropsWithPrefix no longer does variable substitution

2018-04-02 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15357?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16423282#comment-16423282 ] Larry McCay commented on HADOOP-15357: -- [~Jim_Brennan] - I think that both of your assertions are

[jira] [Commented] (HADOOP-15357) Configuration.getPropsWithPrefix no longer does variable substitution

2018-04-02 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15357?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16422962#comment-16422962 ] Larry McCay commented on HADOOP-15357: -- Hi [~Jim_Brennan] - this definitely is an oversight in the

[jira] [Commented] (HADOOP-15325) Make Configuration#getPasswordFromCredentialsProvider() a public API

2018-04-02 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15325?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16422633#comment-16422633 ] Larry McCay commented on HADOOP-15325: -- I am admittedly sort of close to this implementation and

[jira] [Commented] (HADOOP-15325) Add an option to make Configuration.getPassword() not to fallback to read passwords from configuration.

2018-03-26 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15325?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16414720#comment-16414720 ] Larry McCay commented on HADOOP-15325: -- All of that said, if you did want to codify that decision,

[jira] [Commented] (HADOOP-15325) Add an option to make Configuration.getPassword() not to fallback to read passwords from configuration.

2018-03-26 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15325?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16414715#comment-16414715 ] Larry McCay commented on HADOOP-15325: -- [~shv] - It took me a few mins to understand your

[jira] [Commented] (HADOOP-15325) Add an option to make Configuration.getPassword() not to fallback to read passwords from configuration.

2018-03-19 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15325?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16405132#comment-16405132 ] Larry McCay commented on HADOOP-15325: -- Makes sense - +1 for the enhancement idea! > Add an option

[jira] [Comment Edited] (HADOOP-14507) extend per-bucket secret key config with explicit getPassword() on fs.s3a.$bucket.secret.key

2018-02-15 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-14507?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16366289#comment-16366289 ] Larry McCay edited comment on HADOOP-14507 at 2/15/18 9:43 PM: --- {quote}bq. 

[jira] [Comment Edited] (HADOOP-14507) extend per-bucket secret key config with explicit getPassword() on fs.s3a.$bucket.secret.key

2018-02-15 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-14507?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16366289#comment-16366289 ] Larry McCay edited comment on HADOOP-14507 at 2/15/18 9:42 PM: --- {quote}bq. 

[jira] [Commented] (HADOOP-14507) extend per-bucket secret key config with explicit getPassword() on fs.s3a.$bucket.secret.key

2018-02-15 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-14507?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16366289#comment-16366289 ] Larry McCay commented on HADOOP-14507: -- {quote}bq. Note that the value of 

[jira] [Comment Edited] (HADOOP-14507) extend per-bucket secret key config with explicit getPassword() on fs.s3a.$bucket.secret,key

2018-02-15 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-14507?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16365538#comment-16365538 ] Larry McCay edited comment on HADOOP-14507 at 2/15/18 1:47 PM: --- Hi

[jira] [Commented] (HADOOP-14507) extend per-bucket secret key config with explicit getPassword() on fs.s3a.$bucket.secret,key

2018-02-15 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-14507?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16365538#comment-16365538 ] Larry McCay commented on HADOOP-14507: -- Hi [~ste...@apache.org] - this looks good. The per bucket

[jira] [Commented] (HADOOP-14799) Update nimbus-jose-jwt to 4.41.1

2018-02-13 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-14799?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16362598#comment-16362598 ] Larry McCay commented on HADOOP-14799: -- Is there a reason that this wasn't backported to the 2.x

[jira] [Comment Edited] (HADOOP-11717) Add Redirecting WebSSO behavior with JWT Token in Hadoop Auth

2018-02-13 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-11717?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16362594#comment-16362594 ] Larry McCay edited comment on HADOOP-11717 at 2/13/18 4:31 PM: ---

[jira] [Commented] (HADOOP-11717) Add Redirecting WebSSO behavior with JWT Token in Hadoop Auth

2018-02-13 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-11717?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16362594#comment-16362594 ] Larry McCay commented on HADOOP-11717: -- [~brahmareddy] - Thanks - why hasn't HADOOP-14799 been 

[jira] [Commented] (HADOOP-15222) Refine proxy user authorization to support multiple ACL list

2018-02-12 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15222?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16361756#comment-16361756 ] Larry McCay commented on HADOOP-15222: -- Revert it from all branches and put it back to proper

[jira] [Commented] (HADOOP-15222) Refine proxy user authorization to support multiple ACL list

2018-02-12 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15222?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16361602#comment-16361602 ] Larry McCay commented on HADOOP-15222: -- [~eyang] - IMO, we need to revert both HADOOP-14077 and

[jira] [Commented] (HADOOP-15157) Zookeeper authentication related properties to support CredentialProviders

2018-01-04 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15157?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16311646#comment-16311646 ] Larry McCay commented on HADOOP-15157: -- Hi [~grepas] - this is a good idea. Couple

[jira] [Resolved] (HADOOP-15075) Implement KnoxSSO for hadoop web UIs (hdfs, yarn, history server etc.)

2017-11-29 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15075?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Larry McCay resolved HADOOP-15075. -- Resolution: Not A Problem Closing as not a problem - since JWTRedirectAuthenticationHandler

[jira] [Commented] (HADOOP-15075) Implement KnoxSSO for hadoop web UIs (hdfs, yarn, history server etc.)

2017-11-29 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-15075?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16270672#comment-16270672 ] Larry McCay commented on HADOOP-15075: -- [~rmadhu877] - Please take a look at using

[jira] [Commented] (HADOOP-13556) Change Configuration.getPropsWithPrefix to use getProps instead of iterator

2017-09-29 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-13556?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16186644#comment-16186644 ] Larry McCay commented on HADOOP-13556: -- [~asuresh] - why push it out? It has a green light from

[jira] [Commented] (HADOOP-14821) Executing the command 'hdfs -Dhadoop.security.credential.provider.path=file1.jceks,file2.jceks' fails if permission is denied to some files

2017-09-04 Thread Larry McCay (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-14821?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16152767#comment-16152767 ] Larry McCay commented on HADOOP-14821: -- This is something that I was aware of but hadn't come

  1   2   3   4   5   6   7   8   9   10   >