Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-18264

ZKDelegationTokenSecretManager should handle duplicate Token sequenceNums

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Minor
    • Resolution: Unresolved
    • None
    • None
    • security
    • None

    Description

      The ZKDelegationTokenSecretManager relies on the TokenIdentifier sequenceNumber to identify each Token in the ZK Store. It's possible for multiple TokenIdentifiers to share the same sequenceNumber, as this is an int that can overflow. 

      The AbstractDelegationTokenSecretManager uses a Map<TokenIdent, DelegationTokenInformation> so all properties in the TokenIdentifier must match. ZKDelegationTokenSecretManager should follow the same logic.

      Attachments

        Activity

          People

            Unassigned Unassigned
            hchaverri Hector Sandoval Chaverri
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: