Kihwal Lee
|
f8b6aa1ed1
|
HADOOP-13437. KMS should reload whitelist and default key ACLs when hot-reloading. Contributed by Xiao Chen.
(cherry picked from commit 9daa9979a1 )
|
2017-05-08 08:36:53 -05:00 |
Junping Du
|
dfac95a3a2
|
Preparing for 2.8.1 development
|
2017-04-11 11:21:49 -07:00 |
Andrew Wang
|
2bfa57488b
|
HDFS-11441. Add escaping to error message in KMS web UI. Contributed by Aaron T. Myers.
(cherry picked from commit ec839b94c0 )
(cherry picked from commit cf5a1390aa )
|
2017-03-06 10:47:39 -08:00 |
Kihwal Lee
|
2bbcaa8ad0
|
HADOOP-14050. Add process name to kms process. Contributed by Rushabh S Shah.
(cherry picked from commit 7baa6dac54 )
|
2017-02-03 15:40:34 -06:00 |
Junping Du
|
7706a63fb4
|
Preparing for 2.8.1 development after cutting off 2.8.0 branch.
|
2017-01-10 18:03:51 -08:00 |
Xiao Chen
|
49f9e7cf71
|
HADOOP-13847. KMSWebApp should close KeyProviderCryptoExtension. Contributed by John Zhuge.
(cherry picked from commit 291df5c7fb )
|
2016-12-05 09:35:54 -08:00 |
Akira Ajisaka
|
129beeeddd
|
HADOOP-13812. Upgrade Tomcat to 6.0.48. Contributed by John Zhuge.
(cherry picked from commit 00096dcc0c )
(cherry picked from commit 0c895e8a62 )
|
2016-11-29 19:51:38 +09:00 |
Robert Kanter
|
92ee5e2077
|
HADOOP-13838. KMSTokenRenewer should close providers (xiaochen via rkanter)
(cherry picked from commit 47ca9e26fb )
(cherry picked from commit 285edf691d )
|
2016-11-28 18:23:23 -08:00 |
Akira Ajisaka
|
402606323a
|
HADOOP-13814. Sample configuration of KMS HTTP Authentication signature is misleading. Contributed by Masahiro Tanaka.
(cherry picked from commit c65d6b6541 )
(cherry picked from commit d29e3d0f52 )
|
2016-11-21 11:29:00 +09:00 |
Xiao Chen
|
cf366a0fd6
|
HADOOP-13815. TestKMS#testDelegationTokensOpsSimple and TestKMS#testDelegationTokensOpsKerberized Fails in Trunk.
(cherry picked from commit 61c0bedf77 )
(cherry picked from commit efc9ffc3b6 )
|
2016-11-15 16:26:59 -08:00 |
Xiao Chen
|
a22ca0aa58
|
HADOOP-12453. Support decoding KMS Delegation Token with its own Identifier. Contributed by Xiaoyu Yao.
(cherry picked from commit 7154a20bcb )
|
2016-11-03 13:10:41 -07:00 |
Xiao Chen
|
a8aabf9be6
|
HADOOP-13669. Addendum patch 2 for KMS Server should log exceptions before throwing.
(cherry picked from commit 09ef97dccb )
|
2016-10-25 09:59:48 -07:00 |
Xiaoyu Yao
|
7d826631ea
|
HADOOP-13749. KMSClientProvider combined with KeyProviderCache can result in wrong UGI being used. Contributed by Xiaoyu Yao.
(cherry picked from commit d0a347984d )
|
2016-10-23 10:59:10 -07:00 |
Xiao Chen
|
7d19394bd5
|
HADOOP-13381. KMS clients should use KMS Delegation Tokens from current UGI. Contributed by Xiao Chen.
(cherry picked from commit 8ebf2e95d2 )
Conflicts:
hadoop-common-project/hadoop-kms/src/test/java/org/apache/hadoop/crypto/key/kms/server/TestKMS.java
(cherry picked from commit 8fe4b2429a )
|
2016-10-21 14:59:56 -07:00 |
Xiao Chen
|
1ea7070042
|
HADOOP-13669. Addendum patch for KMS Server should log exceptions before throwing.
(cherry picked from commit ae51b11f78 )
|
2016-10-13 22:32:30 -07:00 |
Xiao Chen
|
97105d8733
|
HADOOP-13669. KMS Server should log exceptions before throwing. Contributed by Suraj Acharya.
(cherry picked from commit fc18c32540ed6a410adb123e1105729e0343b7f5)
|
2016-10-10 12:50:59 -07:00 |
Xiao Chen
|
b1eb21e940
|
HADOOP-13317. Add logs to KMS server-side to improve supportability. Contributed by Suraj Acharya.
(cherry picked from commit 89bd6d29a6 )
|
2016-09-30 17:52:17 -07:00 |
Xiao Chen
|
09964a1629
|
HADOOP-13638. KMS should set UGI's Configuration object properly. Contributed by Wei-Chiu Chuang.
(cherry picked from commit fa397e74fe )
Conflicts:
hadoop-common-project/hadoop-kms/src/test/java/org/apache/hadoop/crypto/key/kms/server/TestKMS.java
(cherry picked from commit 06187e4f98 )
Conflicts:
hadoop-common-project/hadoop-kms/src/test/java/org/apache/hadoop/crypto/key/kms/server/TestKMS.java
|
2016-09-26 13:04:29 -07:00 |
Brahma Reddy Battula
|
fa042ff9af
|
HADOOP-12597. In kms-site.xml configuration hadoop.security.keystore.JavaKeyStoreProvider.password should be updated with new name. ( Contributed by Surendra Singh Lilhore via Brahma Reddy Battula)
|
2016-09-26 23:19:36 +05:30 |
Xiao Chen
|
900dc70a01
|
HDFS-10489. Deprecate dfs.encryption.key.provider.uri for HDFS encryption zones. Contributed by Xiao Chen.
(cherry picked from commit ea839bd48e )
Conflicts:
hadoop-hdfs-project/hadoop-hdfs-client/src/main/java/org/apache/hadoop/hdfs/HdfsConfiguration.java
hadoop-hdfs-project/hadoop-hdfs/src/main/resources/hdfs-default.xml
(cherry picked from commit 20585ade1d9d7fbd8b9df8b1e3db5a74fd4441a6)
|
2016-09-19 16:38:00 -07:00 |
Zhe Zhang
|
8bc33bf343
|
HADOOP-12765. HttpServer2 should switch to using the non-blocking SslSelectChannelConnector to prevent performance degradation when handling SSL connections. Contributed by Min Shen. Branch-2 patch contributed by Wei-Chiu Chuang.
(cherry picked from commit dfcbc12026 )
|
2016-08-23 14:46:47 -07:00 |
Wei-Chiu Chuang
|
b0bc7681c3
|
HADOOP-13190. Mention LoadBalancingKMSClientProvider in KMS HA documentation. Contributed by Wei-Chiu Chuang.
(cherry picked from commit db719ef125 )
(cherry picked from commit 6d53e096b2 )
|
2016-08-11 12:33:15 -07:00 |
Wei-Chiu Chuang
|
7b042c5c72
|
HADOOP-13395. Enhance TestKMSAudit. Contributed by Xiao Chen.
(cherry picked from commit 070548943a )
Conflicts:
hadoop-common-project/hadoop-kms/src/test/java/org/apache/hadoop/crypto/key/kms/server/TestKMSAudit.java
(cherry picked from commit cc20316b55 )
|
2016-08-08 15:18:19 -07:00 |
Andrew Wang
|
59a70977c3
|
HADOOP-13251. Authenticate with Kerberos credentials when renewing KMS delegation token. Contributed by Xiao Chen.
(cherry picked from commit 771f798edf )
Conflicts:
hadoop-common-project/hadoop-kms/src/test/java/org/apache/hadoop/crypto/key/kms/server/TestKMS.java
(cherry picked from commit d8a69c8737 )
|
2016-06-27 18:29:58 -07:00 |
Xiaoyu Yao
|
e84a9c976a
|
HADOOP-13255. KMSClientProvider should check and renew tgt when doing delegation token operations. Contributed by Xiao Chen.
(cherry picked from commit ddf66427ff )
|
2016-06-16 20:12:55 -07:00 |
Andrew Wang
|
d712b2ee3b
|
HADOOP-13155. Implement TokenRenewer to renew and cancel delegation tokens in KMS. Contributed by Xiao Chen.
(cherry picked from commit 713cb71820 )
Conflicts:
hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/KeyProviderDelegationTokenExtension.java
hadoop-hdfs-project/hadoop-hdfs-client/src/main/java/org/apache/hadoop/hdfs/DFSUtilClient.java
(cherry picked from commit 03c4724c88 )
Conflicts:
hadoop-hdfs-project/hadoop-hdfs-client/src/main/java/org/apache/hadoop/hdfs/DFSUtilClient.java
|
2016-06-03 17:03:40 -07:00 |
Andrew Wang
|
0d4fbf01be
|
HADOOP-13030. Handle special characters in passwords in KMS startup script. Contributed by Xiao Chen.
(cherry picked from commit 7271e91b79 )
|
2016-04-27 17:14:00 -07:00 |
Andrew Wang
|
bc148530d4
|
HADOOP-12951. Improve documentation on KMS ACLs and delegation tokens. Contributed by Xiao Chen.
(cherry picked from commit 594c70f779 )
(cherry picked from commit 2f983b161f )
|
2016-04-07 23:51:19 -07:00 |
Andrew Wang
|
d2c33ba61e
|
HADOOP-12962. KMS key names are incorrectly encoded when creating key. Contributed by Xiao Chen.
(cherry picked from commit d4df7849a5 )
(cherry picked from commit c58599acba )
|
2016-03-25 15:29:09 -07:00 |
Masatake Iwasaki
|
9d551a3adf
|
HADOOP-12470. In-page TOC of documentation should be automatically generated by doxia macro (iwasakims)
(cherry picked from commit cbd31328a6 )
Conflicts:
hadoop-common-project/hadoop-common/src/site/markdown/CommandsManual.md
hadoop-common-project/hadoop-common/src/site/markdown/UnixShellGuide.md
(cherry picked from commit 722182fdfb )
|
2016-03-04 14:13:30 +09:00 |
Yongjun Zhang
|
62ba1e415a
|
HADOOP-12828. Print user when services are started. (Wei-Chiu Chuang via Yongjun Zhang)
(cherry picked from commit a963baba10 )
|
2016-02-19 09:58:09 -08:00 |
Andrew Wang
|
9afa321fd2
|
HADOOP-12699. TestKMS#testKMSProvider intermittently fails during 'test rollover draining'. Contributed by Xiao Chen.
(cherry picked from commit 8fdef0bd9d )
(cherry picked from commit fb57c01eaa )
|
2016-02-11 17:21:55 -08:00 |
cnauroth
|
ddd82d24be
|
HADOOP-12795. KMS does not log detailed stack trace for unexpected errors. Contributed by Chris Nauroth.
(cherry picked from commit 70c756d35e )
(cherry picked from commit 25dcb88630 )
|
2016-02-11 16:53:21 -08:00 |
Zhe Zhang
|
9023751de6
|
HADOOP-12764. Increase default value of KMS maxHttpHeaderSize and make it configurable. (zhz)
Change-Id: Iabb766f6311b83a1ac03093b0ba26a0284b74d70
|
2016-02-11 09:29:45 -08:00 |
Xiaoyu Yao
|
a48fdc1907
|
HADOOP-12682. Fix TestKMS#testKMSRestart* failure. Contributed by Wei-Chiu Chuang.
(cherry picked from commit ab725cff66 )
|
2015-12-30 10:44:13 -08:00 |
Haohui Mai
|
64add87f5c
|
HADOOP-11218. Add TLSv1.1,TLSv1.2 to KMS, HttpFS, SSLFactory. Contributed by Vijay Singh.
|
2015-11-22 16:00:44 -08:00 |
Haohui Mai
|
950e8a459e
|
HADOOP-12474. MiniKMS should use random ports for Jetty server by default. Contributed by Mingliang Liu.
|
2015-10-13 13:08:03 -07:00 |
Andrew Wang
|
bdaa0fed13
|
HADOOP-11885. hadoop-dist dist-layout-stitching.sh does not work with dash. (wang)
(cherry picked from commit 7673d4f205 )
Conflicts:
hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-nativetask/pom.xml
hadoop-mapreduce-project/pom.xml
|
2015-05-29 14:55:52 -07:00 |
Colin Patrick Mccabe
|
3dec58dd78
|
HADOOP-11969. ThreadLocal initialization in several classes is not thread safe (Sean Busbey via Colin P. McCabe)
(cherry picked from commit 7dba7005b7 )
|
2015-05-26 12:40:41 -07:00 |
Robert Kanter
|
f00815ac8a
|
HADOOP-11870. [JDK8] AuthenticationFilter, CertificateUtil, SignerSecretProviders, KeyAuthorizationKeyProvider Javadoc issues (rkanter)
(cherry picked from commit 9fec02c069 )
|
2015-04-27 13:26:00 -07:00 |
Haohui Mai
|
e75e6c66ea
|
HADOOP-11633. Convert remaining branch-2 .apt.vm files to markdown. Contributed by Masatake Iwasaki.
|
2015-03-11 14:23:44 -07:00 |
Vinod Kumar Vavilapalli
|
d9416317a9
|
Preparing for 2.8.0 development. Changing SNAPSHOT version to be 2.8 on branch-2.
|
2015-03-08 20:32:51 -07:00 |
Andrew Wang
|
0512e50d6e
|
HADOOP-11620. Add support for load balancing across a group of KMS for HA. Contributed by Arun Suresh.
(cherry picked from commit 71385f9b70 )
|
2015-02-25 21:17:44 -08:00 |
yliu
|
3ac8f88989
|
HADOOP-11469. KMS should skip default.key.acl and whitelist.key.acl when loading key acl. (Dian Fu via yliu)
|
2015-01-27 23:55:52 +08:00 |
Andrew Wang
|
7b69719455
|
HADOOP-11482. Use correct UGI when KMSClientProvider is called by a proxy user. Contributed by Arun Suresh.
(cherry picked from commit 4b00935643 )
|
2015-01-23 12:11:29 -08:00 |
Akira Ajisaka
|
13067cf4b1
|
HADOOP-11493. Fix some typos in kms-acls.xml description. (Contributed by Charles Lamb)
(cherry picked from commit aee4500612 )
|
2015-01-23 11:49:37 +09:00 |
Haohui Mai
|
784f481473
|
HADOOP-11378. Fix new findbugs warnings in hadoop-kms. Contributed by Li Lu.
|
2014-12-09 13:10:09 -08:00 |
Andrew Wang
|
deaa172e7a
|
HADOOP-11368. Fix SSLFactory truststore reloader thread leak in KMSClientProvider. Contributed by Arun Suresh.
(cherry picked from commit 74d4bfded9 )
|
2014-12-09 10:47:33 -08:00 |
Andrew Wang
|
46a7365164
|
HADOOP-11329. Add JAVA_LIBRARY_PATH to KMS startup options. Contributed by Arun Suresh.
(cherry picked from commit ddffcd8fac )
|
2014-12-08 13:45:34 -08:00 |
Andrew Wang
|
b8e4fffa49
|
HADOOP-11355. When accessing data in HDFS and the key has been deleted, a Null Pointer Exception is shown. Contributed by Arun Suresh.
(cherry picked from commit 9cdaec6a6f )
|
2014-12-05 12:01:32 -08:00 |