[jira] [Created] (HADOOP-8943) Enable to support multiple ADs and different group mapping for different user

2012-10-18 Thread Kai Zheng (JIRA)
Kai Zheng created HADOOP-8943: - Summary: Enable to support multiple ADs and different group mapping for different user Key: HADOOP-8943 URL: https://issues.apache.org/jira/browse/HADOOP-8943 Project:

[jira] [Updated] (HADOOP-8943) Enable to support multiple ADs and different group mapping for different user

2012-11-13 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-8943?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-8943: -- Attachment: HADOOP-8943.patch Initial patch for review. Enable to support multiple

[jira] [Created] (HADOOP-10670) Allow AuthenticationFilter to respect signature secret file even without AuthenticationFilterInitializer

2014-06-08 Thread Kai Zheng (JIRA)
Kai Zheng created HADOOP-10670: -- Summary: Allow AuthenticationFilter to respect signature secret file even without AuthenticationFilterInitializer Key: HADOOP-10670 URL:

[jira] [Updated] (HADOOP-10670) Allow AuthenticationFilter to respect signature secret file even without AuthenticationFilterInitializer

2014-06-08 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10670?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-10670: --- Attachment: hadoop-10670.patch Allow AuthenticationFilter to respect signature secret file even

[jira] [Updated] (HADOOP-10670) Allow AuthenticationFilter to respect signature secret file even without AuthenticationFilterInitializer

2014-06-08 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10670?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-10670: --- Status: Patch Available (was: Open) Attached a patch. Changes summary: 1. Moving signature file

[jira] [Created] (HADOOP-10671) Single sign on between web console and webhdfs

2014-06-09 Thread Kai Zheng (JIRA)
Kai Zheng created HADOOP-10671: -- Summary: Single sign on between web console and webhdfs Key: HADOOP-10671 URL: https://issues.apache.org/jira/browse/HADOOP-10671 Project: Hadoop Common Issue

[jira] [Updated] (HADOOP-10671) Single sign on between web console and webhdfs

2014-06-09 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10671?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-10671: --- Attachment: hadoop-10671.patch Single sign on between web console and webhdfs

[jira] [Updated] (HADOOP-10671) Single sign on between web console and webhdfs

2014-06-09 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10671?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-10671: --- Status: Patch Available (was: Open) Attached a simple patch: It allows webhdfs to access

[jira] [Updated] (HADOOP-10670) Allow AuthenticationFilter to respect signature secret file even without AuthenticationFilterInitializer

2014-06-09 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10670?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-10670: --- Component/s: security Allow AuthenticationFilter to respect signature secret file even without

[jira] [Updated] (HADOOP-10671) Single sign on between web console and webhdfs

2014-06-17 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10671?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-10671: --- Attachment: hadoop-10671-v2.patch Updated the patch with some fixes and comments. Single sign on

[jira] [Commented] (HADOOP-10671) Single sign on between web console and webhdfs

2014-06-17 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10671?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14033611#comment-14033611 ] Kai Zheng commented on HADOOP-10671: Hi Alejandro, Thanks for your review and

[jira] [Updated] (HADOOP-10670) Allow AuthenticationFilter to respect signature secret file even without AuthenticationFilterInitializer

2014-06-17 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10670?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-10670: --- Attachment: hadoop-10670-v2.patch Updated the patch according to review comment with unit tests.

[jira] [Commented] (HADOOP-10670) Allow AuthenticationFilter to respect signature secret file even without AuthenticationFilterInitializer

2014-06-17 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10670?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14033655#comment-14033655 ] Kai Zheng commented on HADOOP-10670: Hi Alejandro, All the issues you commented

[jira] [Commented] (HADOOP-8943) Support multiple group mapping providers

2014-06-17 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-8943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14033668#comment-14033668 ] Kai Zheng commented on HADOOP-8943: --- Hi Brandon, Thanks for your review. I will rebase

[jira] [Commented] (HADOOP-10670) Allow AuthenticationFilter to respect signature secret file even without AuthenticationFilterInitializer

2014-06-18 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10670?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14036914#comment-14036914 ] Kai Zheng commented on HADOOP-10670: Zhijie, thanks for your review. 1. I would

[jira] [Updated] (HADOOP-8943) Support multiple group mapping providers

2014-06-23 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-8943?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-8943: -- Attachment: hadoop-8943-v2.patch Updated the patch as discussed. Support multiple group mapping

[jira] [Commented] (HADOOP-8943) Support multiple group mapping providers

2014-06-23 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-8943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14040627#comment-14040627 ] Kai Zheng commented on HADOOP-8943: --- Hi Brandon, I updated the patch as discussed

[jira] [Updated] (HADOOP-8943) Support multiple group mapping providers

2014-06-24 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-8943?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-8943: -- Attachment: hadoop-8943-v3.patch Updated the comment as review suggested. Support multiple group

[jira] [Commented] (HADOOP-8943) Support multiple group mapping providers

2014-06-24 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-8943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14041966#comment-14041966 ] Kai Zheng commented on HADOOP-8943: --- Brandon, I updated the patch regarding the

[jira] [Updated] (HADOOP-8943) Support multiple group mapping providers

2014-06-26 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-8943?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-8943: -- Attachment: hadoop-8943-v4.patch Updated the patch As Brandon suggested. Support multiple group

[jira] [Commented] (HADOOP-8943) Support multiple group mapping providers

2014-06-26 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-8943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14044523#comment-14044523 ] Kai Zheng commented on HADOOP-8943: --- Brandon, I slightly updated the patch to reference

[jira] [Updated] (HADOOP-10753) Could be better to move CommonConfigurationKeysPublic to org.apache.hadoop.common package

2014-06-26 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10753?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-10753: --- Description: As discussed in HADOOP-8943, it would be better to place

[jira] [Created] (HADOOP-10753) Could be better to move CommonConfigurationKeysPublic to org.apache.hadoop.common package

2014-06-26 Thread Kai Zheng (JIRA)
Kai Zheng created HADOOP-10753: -- Summary: Could be better to move CommonConfigurationKeysPublic to org.apache.hadoop.common package Key: HADOOP-10753 URL: https://issues.apache.org/jira/browse/HADOOP-10753

[jira] [Commented] (HADOOP-8943) Support multiple group mapping providers

2014-06-26 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-8943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14044531#comment-14044531 ] Kai Zheng commented on HADOOP-8943: --- Opened HADOOP-10753 to discuss the concern.

[jira] [Commented] (HADOOP-10753) Could be better to move CommonConfigurationKeysPublic to org.apache.hadoop.common package

2014-06-26 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10753?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14045432#comment-14045432 ] Kai Zheng commented on HADOOP-10753: Jason, I can't agree with you any more. I will

[jira] [Commented] (HADOOP-10753) Could be better to move CommonConfigurationKeysPublic to org.apache.hadoop.common package

2014-06-27 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10753?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14045783#comment-14045783 ] Kai Zheng commented on HADOOP-10753: Steve, Thanks for your thought. bq. It'll

[jira] [Commented] (HADOOP-9952) Create secured MiniClusters

2014-06-30 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9952?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14047511#comment-14047511 ] Kai Zheng commented on HADOOP-9952: --- Below is from Chris: {quote} There are a couple of

[jira] [Created] (HADOOP-10847) Cleanup calling of sun.security.x509

2014-07-15 Thread Kai Zheng (JIRA)
Kai Zheng created HADOOP-10847: -- Summary: Cleanup calling of sun.security.x509 Key: HADOOP-10847 URL: https://issues.apache.org/jira/browse/HADOOP-10847 Project: Hadoop Common Issue Type:

[jira] [Created] (HADOOP-10848) Cleanup calling of sun.security.krb5.Config

2014-07-15 Thread Kai Zheng (JIRA)
Kai Zheng created HADOOP-10848: -- Summary: Cleanup calling of sun.security.krb5.Config Key: HADOOP-10848 URL: https://issues.apache.org/jira/browse/HADOOP-10848 Project: Hadoop Common Issue

[jira] [Assigned] (HADOOP-10600) AuthenticationFilterInitializer doesn't allow null signature secret file

2014-08-04 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10600?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng reassigned HADOOP-10600: -- Assignee: Kai Zheng AuthenticationFilterInitializer doesn't allow null signature secret

[jira] [Resolved] (HADOOP-10600) AuthenticationFilterInitializer doesn't allow null signature secret file

2014-08-04 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10600?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng resolved HADOOP-10600. Resolution: Duplicate Release Note: Per Zhijie's request, resolve this as a duplicate of

[jira] [Commented] (HADOOP-10670) Allow AuthenticationFilter to respect signature secret file even without AuthenticationFilterInitializer

2014-08-04 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10670?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14085837#comment-14085837 ] Kai Zheng commented on HADOOP-10670: Zhijie, I resolved HADOOP-10600 as a duplicate

[jira] [Updated] (HADOOP-10670) Allow AuthenticationFilter to respect signature secret file even without AuthenticationFilterInitializer

2014-08-05 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10670?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-10670: --- Attachment: hadoop-10670-v3.patch Allow AuthenticationFilter to respect signature secret file

[jira] [Commented] (HADOOP-10670) Allow AuthenticationFilter to respect signature secret file even without AuthenticationFilterInitializer

2014-08-05 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10670?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14086033#comment-14086033 ] Kai Zheng commented on HADOOP-10670: Updated the patch with the following changes

[jira] [Commented] (HADOOP-10670) Allow AuthenticationFilter to respect signature secret file even without AuthenticationFilterInitializer

2014-08-05 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10670?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14087135#comment-14087135 ] Kai Zheng commented on HADOOP-10670: I double checked the reported test failures.

[jira] [Created] (HADOOP-10959) A Complement and Short Term Solution to TokenAuth Based on Kerberos Pre-Authentication Framework

2014-08-11 Thread Kai Zheng (JIRA)
Kai Zheng created HADOOP-10959: -- Summary: A Complement and Short Term Solution to TokenAuth Based on Kerberos Pre-Authentication Framework Key: HADOOP-10959 URL: https://issues.apache.org/jira/browse/HADOOP-10959

[jira] [Updated] (HADOOP-10959) A Complement and Short Term Solution to TokenAuth Based on Kerberos Pre-Authentication Framework

2014-08-11 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10959?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-10959: --- Attachment: KerbToken-v2.pdf The design doc. Your comments are welcome. Thanks. A Complement and

[jira] [Updated] (HADOOP-10959) A Complement and Short Term Solution to TokenAuth Based on Kerberos Pre-Authentication Framework

2014-08-11 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10959?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-10959: --- Description: To implement and integrate pluggable authentication providers, enhance desirable

[jira] [Commented] (HADOOP-10959) A Complement and Short Term Solution to TokenAuth Based on Kerberos Pre-Authentication Framework

2014-08-11 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10959?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14093765#comment-14093765 ] Kai Zheng commented on HADOOP-10959: Below is the brief introduction about the

[jira] [Commented] (HADOOP-10959) A Complement and Short Term Solution to TokenAuth Based on Kerberos Pre-Authentication Framework

2014-08-12 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10959?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14095056#comment-14095056 ] Kai Zheng commented on HADOOP-10959: bq. we need to discuss is exactly who has the

[jira] [Commented] (HADOOP-10959) A Complement and Short Term Solution to TokenAuth Based on Kerberos Pre-Authentication Framework

2014-08-13 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10959?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14096392#comment-14096392 ] Kai Zheng commented on HADOOP-10959: bq.I'm not sure why generating principals and

[jira] [Updated] (HADOOP-10959) A complement solution to TokenAuth based on Kerberos pre-authentication framework

2014-08-14 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10959?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-10959: --- Summary: A complement solution to TokenAuth based on Kerberos pre-authentication framework (was:

[jira] [Commented] (HADOOP-10959) A complement solution to TokenAuth based on Kerberos pre-authentication framework

2014-08-15 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-10959?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14098399#comment-14098399 ] Kai Zheng commented on HADOOP-10959: bq.Undermine as in bypassing a password/keytab

[jira] [Created] (HADOOP-9125) LdapGroupsMapping threw CommunicationException after some idle time

2012-12-09 Thread Kai Zheng (JIRA)
Kai Zheng created HADOOP-9125: - Summary: LdapGroupsMapping threw CommunicationException after some idle time Key: HADOOP-9125 URL: https://issues.apache.org/jira/browse/HADOOP-9125 Project: Hadoop Common

[jira] [Commented] (HADOOP-9125) LdapGroupsMapping threw CommunicationException after some idle time

2012-12-09 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9125?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13527686#comment-13527686 ] Kai Zheng commented on HADOOP-9125: --- It was caused because DirContext used to

[jira] [Commented] (HADOOP-9125) LdapGroupsMapping threw CommunicationException after some idle time

2012-12-09 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9125?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13527687#comment-13527687 ] Kai Zheng commented on HADOOP-9125: --- One possible fix would be: create new DirContext

[jira] [Updated] (HADOOP-9125) LdapGroupsMapping threw CommunicationException after some idle time

2012-12-09 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9125?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-9125: -- Affects Version/s: (was: 2.0.3-alpha) 0.23.3

[jira] [Commented] (HADOOP-9125) LdapGroupsMapping threw CommunicationException after some idle time

2012-12-09 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9125?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13527716#comment-13527716 ] Kai Zheng commented on HADOOP-9125: --- We just had a fix as proposed above and it works

[jira] [Created] (HADOOP-9134) Unified server side user groups mapping service

2012-12-11 Thread Kai Zheng (JIRA)
Kai Zheng created HADOOP-9134: - Summary: Unified server side user groups mapping service Key: HADOOP-9134 URL: https://issues.apache.org/jira/browse/HADOOP-9134 Project: Hadoop Common Issue

[jira] [Commented] (HADOOP-9134) Unified server side user groups mapping service

2012-12-11 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9134?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13529412#comment-13529412 ] Kai Zheng commented on HADOOP-9134: --- Currently user group mapping service can only be

[jira] [Commented] (HADOOP-9134) Unified server side user groups mapping service

2012-12-11 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9134?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13529460#comment-13529460 ] Kai Zheng commented on HADOOP-9134: --- So how to improve to avoid these issues, this

[jira] [Commented] (HADOOP-9125) LdapGroupsMapping threw CommunicationException after some idle time

2012-12-11 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9125?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13529533#comment-13529533 ] Kai Zheng commented on HADOOP-9125: --- In our fix it tried to reconnect 3 times and then

[jira] [Updated] (HADOOP-9125) LdapGroupsMapping threw CommunicationException after some idle time

2012-12-13 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9125?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-9125: -- Status: Patch Available (was: Open) LdapGroupsMapping threw CommunicationException after some

[jira] [Updated] (HADOOP-9125) LdapGroupsMapping threw CommunicationException after some idle time

2012-12-13 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9125?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-9125: -- Attachment: HADOOP-9125.patch Thanks for code review. LdapGroupsMapping threw

[jira] [Updated] (HADOOP-8943) Support multiple group mapping providers

2012-12-14 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-8943?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-8943: -- Summary: Support multiple group mapping providers (was: Enable to support multiple ADs and different

[jira] [Updated] (HADOOP-8943) Support multiple group mapping providers

2012-12-14 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-8943?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-8943: -- Description: Discussed with Natty about LdapGroupMapping, we need to improve it so that: 1. It's

[jira] [Updated] (HADOOP-8943) Support multiple group mapping providers

2012-12-14 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-8943?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-8943: -- Attachment: HADOOP-8943.patch Updated patch with sync. Support multiple group

[jira] [Updated] (HADOOP-8943) Support multiple group mapping providers

2012-12-14 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-8943?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-8943: -- Tags: Group Mapping (was: Ldap AD GroupMapping) Target Version/s: 2.0.3-alpha

[jira] [Commented] (HADOOP-9134) Unified server side user groups mapping service

2012-12-14 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9134?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13532889#comment-13532889 ] Kai Zheng commented on HADOOP-9134: --- OK, seems this is desired, I'm working on it.

[jira] [Updated] (HADOOP-8943) Support multiple group mapping providers

2012-12-15 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-8943?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-8943: -- Attachment: HADOOP-8943.patch Updated the patch with missed files. Support multiple

[jira] [Updated] (HADOOP-9125) LdapGroupsMapping threw CommunicationException after some idle time

2012-12-15 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9125?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-9125: -- Attachment: HADOOP-9125.patch LdapGroupsMapping threw CommunicationException after some idle

[jira] [Updated] (HADOOP-9125) LdapGroupsMapping threw CommunicationException after some idle time

2012-12-15 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9125?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-9125: -- Attachment: (was: HADOOP-9125.patch) LdapGroupsMapping threw CommunicationException after

[jira] [Updated] (HADOOP-9134) Unified server side user groups mapping service

2013-01-15 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9134?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-9134: -- Attachment: HADOOP-9134.patch Initial patch for review. Unified server side user

[jira] [Updated] (HADOOP-9134) Unified server side user groups mapping service

2013-01-15 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9134?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-9134: -- Status: Patch Available (was: Open) Unified server side user groups mapping service

[jira] [Updated] (HADOOP-9134) Unified server side user groups mapping service

2013-01-16 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9134?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-9134: -- Attachment: HADOOP-9134.patch Merged with latest codes and fixed the building issue.

[jira] [Updated] (HADOOP-9134) Unified server side user groups mapping service

2013-01-16 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9134?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-9134: -- Attachment: HADOOP-9134.patch Fixed the warning reported by Hadoop-QA. Unified

[jira] [Created] (HADOOP-9325) KerberosAuthenticationHandler AuthenticationFilter and should be able to reference Hadoop configurations

2013-02-22 Thread Kai Zheng (JIRA)
Kai Zheng created HADOOP-9325: - Summary: KerberosAuthenticationHandler AuthenticationFilter and should be able to reference Hadoop configurations Key: HADOOP-9325 URL:

[jira] [Updated] (HADOOP-9325) KerberosAuthenticationHandler and AuthenticationFilter should be able to reference Hadoop configurations

2013-02-24 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9325?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-9325: -- Summary: KerberosAuthenticationHandler and AuthenticationFilter should be able to reference Hadoop

[jira] [Commented] (HADOOP-9325) KerberosAuthenticationHandler and AuthenticationFilter should be able to reference Hadoop configurations

2013-02-26 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9325?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13587875#comment-13587875 ] Kai Zheng commented on HADOOP-9325: --- Hi Alejandro, Thanks for your suggestion. I did

[jira] [Created] (HADOOP-9392) Token based authentication and Single Sign On

2013-03-11 Thread Kai Zheng (JIRA)
Kai Zheng created HADOOP-9392: - Summary: Token based authentication and Single Sign On Key: HADOOP-9392 URL: https://issues.apache.org/jira/browse/HADOOP-9392 Project: Hadoop Common Issue Type:

[jira] [Updated] (HADOOP-9392) Token based authentication and Single Sign On

2013-03-11 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-9392: -- Tags: Project Rhino Token based authentication and Single Sign On

[jira] [Commented] (HADOOP-9392) Token based authentication and Single Sign On

2013-03-22 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13611420#comment-13611420 ] Kai Zheng commented on HADOOP-9392: --- Hi Daryn, Thanks for letting know your work. I

[jira] [Created] (HADOOP-9466) Unified authorization framework

2013-04-08 Thread Kai Zheng (JIRA)
Kai Zheng created HADOOP-9466: - Summary: Unified authorization framework Key: HADOOP-9466 URL: https://issues.apache.org/jira/browse/HADOOP-9466 Project: Hadoop Common Issue Type: Improvement

[jira] [Created] (HADOOP-9477) posixGroups support for LDAP groups mapping service

2013-04-15 Thread Kai Zheng (JIRA)
Kai Zheng created HADOOP-9477: - Summary: posixGroups support for LDAP groups mapping service Key: HADOOP-9477 URL: https://issues.apache.org/jira/browse/HADOOP-9477 Project: Hadoop Common Issue

[jira] [Commented] (HADOOP-9477) posixGroups support for LDAP groups mapping service

2013-04-15 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9477?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13632596#comment-13632596 ] Kai Zheng commented on HADOOP-9477: --- Here's a sample account and group. posixGroup

[jira] [Commented] (HADOOP-9392) Token based authentication and Single Sign On

2013-04-17 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13633923#comment-13633923 ] Kai Zheng commented on HADOOP-9392: --- Hi Thomas, We discussed about this via email in

[jira] [Commented] (HADOOP-9479) Ability to plugin custom authentication mechanisms based on Jaas and Sasl

2013-04-23 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9479?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13638915#comment-13638915 ] Kai Zheng commented on HADOOP-9479: --- Hi Benoy, Very interesting patch! It provides

[jira] [Commented] (HADOOP-9477) posixGroups support for LDAP groups mapping service

2013-04-26 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9477?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13643250#comment-13643250 ] Kai Zheng commented on HADOOP-9477: --- Hi Daryn, Thanks for your comment. For

[jira] [Updated] (HADOOP-9392) Token based authentication and Single Sign On

2013-05-02 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-9392: -- Attachment: token-based-authn-plus-sso.pdf Here is the first version of our architecture and design

[jira] [Updated] (HADOOP-9392) Token based authentication and Single Sign On

2013-05-05 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-9392: -- Assignee: Kai Zheng Token based authentication and Single Sign On

[jira] [Commented] (HADOOP-9392) Token based authentication and Single Sign On

2013-05-13 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13655883#comment-13655883 ] Kai Zheng commented on HADOOP-9392: --- I agree we need to rationalize to avoid overlap

[jira] [Commented] (HADOOP-9421) Generalize SASL Support with Protocol Buffer

2013-05-15 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9421?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13658221#comment-13658221 ] Kai Zheng commented on HADOOP-9421: --- Luke good point. It’s great to resolve this issue

[jira] [Commented] (HADOOP-9392) Token based authentication and Single Sign On

2013-05-15 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13658225#comment-13658225 ] Kai Zheng commented on HADOOP-9392: --- Larry - You use an extra Service Access Token to

[jira] [Commented] (HADOOP-9392) Token based authentication and Single Sign On

2013-05-15 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13659243#comment-13659243 ] Kai Zheng commented on HADOOP-9392: --- Thomas - Identity Token represents the identity

[jira] [Created] (HADOOP-9569) Implementing TokenAuth framework and Simple authentication over TokenAuth

2013-05-17 Thread Kai Zheng (JIRA)
Kai Zheng created HADOOP-9569: - Summary: Implementing TokenAuth framework and Simple authentication over TokenAuth Key: HADOOP-9569 URL: https://issues.apache.org/jira/browse/HADOOP-9569 Project: Hadoop

[jira] [Commented] (HADOOP-9392) Token based authentication and Single Sign On

2013-06-02 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13672714#comment-13672714 ] Kai Zheng commented on HADOOP-9392: --- Kyle – Thanks for your questions. 1) The client

[jira] [Commented] (HADOOP-9392) Token based authentication and Single Sign On

2013-06-05 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13675893#comment-13675893 ] Kai Zheng commented on HADOOP-9392: --- Kyle- thank you for thinking about this. I’m glad

[jira] [Commented] (HADOOP-9392) Token based authentication and Single Sign On

2013-06-06 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13676939#comment-13676939 ] Kai Zheng commented on HADOOP-9392: --- Daryn- Sorry for late response, your comments are

[jira] [Commented] (HADOOP-9392) Token based authentication and Single Sign On

2013-06-07 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13677998#comment-13677998 ] Kai Zheng commented on HADOOP-9392: --- Hi Sanjay, thanks for your comments. You’re right

[jira] [Commented] (HADOOP-9392) Token based authentication and Single Sign On

2013-06-09 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13678961#comment-13678961 ] Kai Zheng commented on HADOOP-9392: --- Daryn – bq. Delegation tokens are embedded at the

[jira] [Created] (HADOOP-9653) Token validation and transmission

2013-06-19 Thread Kai Zheng (JIRA)
Kai Zheng created HADOOP-9653: - Summary: Token validation and transmission Key: HADOOP-9653 URL: https://issues.apache.org/jira/browse/HADOOP-9653 Project: Hadoop Common Issue Type: Sub-task

[jira] [Commented] (HADOOP-9653) Token validation and transmission

2013-06-19 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9653?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13687707#comment-13687707 ] Kai Zheng commented on HADOOP-9653: --- To securely transmit token in Hadoop RPC in a way

[jira] [Commented] (HADOOP-9653) Token validation and transmission

2013-06-20 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9653?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13689398#comment-13689398 ] Kai Zheng commented on HADOOP-9653: --- At any rate, I have difficulty visualizing how

[jira] [Commented] (HADOOP-9653) Token validation and transmission

2013-06-21 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9653?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13690468#comment-13690468 ] Kai Zheng commented on HADOOP-9653: --- This falls into the 3rd case in situations where

[jira] [Commented] (HADOOP-9659) Hadoop authentication enhancement use cases, goals, requirements and constraints

2013-07-03 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9659?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13699060#comment-13699060 ] Kai Zheng commented on HADOOP-9659: --- === From TokenAuth === Use cases 1. Users can

[jira] [Commented] (HADOOP-9671) Improve Hadoop security - Use cases

2013-07-03 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9671?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13699063#comment-13699063 ] Kai Zheng commented on HADOOP-9671: --- === From TokenAuth === Use cases 1. Users can

[jira] [Updated] (HADOOP-9392) Token based authentication and Single Sign On

2013-07-03 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-9392: -- Attachment: token-based-authn-plus-sso-v2.0.pdf TokenAuth design updated. Token

[jira] [Commented] (HADOOP-9392) Token based authentication and Single Sign On

2013-07-03 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13699271#comment-13699271 ] Kai Zheng commented on HADOOP-9392: --- We just updated TokenAuth design and please help

[jira] [Commented] (HADOOP-9392) Token based authentication and Single Sign On

2013-07-03 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13699737#comment-13699737 ] Kai Zheng commented on HADOOP-9392: --- Sure thing Larry. A lot of these updates predate

[jira] [Commented] (HADOOP-9392) Token based authentication and Single Sign On

2013-07-24 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/HADOOP-9392?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13718088#comment-13718088 ] Kai Zheng commented on HADOOP-9392: --- Thanks for your thoughts. Sorry for being late to

  1   2   3   4   5   6   7   8   9   10   >