HDFS-6851. Refactor EncryptionZoneWithId and EncryptionZone. (clamb via wang)
HDFS-6789. TestDFSClientFailover.testFileContextDoesntDnsResolveLogicalURI and TestDFSClientFailover.testDoesntDnsResolveLogicalURI failing on jdk7. Contributed by Akira Ajisaka.
HADOOP-10922. User documentation for CredentialShell. Contributed by Larry McCay.
YARN-1250. Generic history service should support application-acls. (Contributed by Zhijie Shen)
YARN-1250. Addendum
HADOOP-11096. KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt. (tucu)
HADOOP-11097. kms docs say proxyusers, not proxyuser for config params. (clamb via tucu)
HADOOP-11062. CryptoCodec testcases requiring OpenSSL should be run only if -Pnative is used. (asuresh via tucu)