[ 
https://issues.apache.org/jira/browse/HADOOP-12847?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15169907#comment-15169907
 ] 

Wei-Chiu Chuang commented on HADOOP-12847:
------------------------------------------

Thanks [~cnauroth] and [~xyao] for comments.
How do you think about support both http and https? Should the tool use an 
option to specify the protocol, or let it attempt to connect to https and then 
retry http?
For authentication, {{KerberosAuthenticator}} automatically falls back to 
simple, so it should not require additional configuration. 

On thing to consider is that https connection may need additional parameters to 
supply the path to trust store file.

> hadoop daemonlog should support https and SPNEGO for Kerberized cluster
> -----------------------------------------------------------------------
>
>                 Key: HADOOP-12847
>                 URL: https://issues.apache.org/jira/browse/HADOOP-12847
>             Project: Hadoop Common
>          Issue Type: New Feature
>            Reporter: Wei-Chiu Chuang
>            Assignee: Wei-Chiu Chuang
>         Attachments: HADOOP-12847.001.patch
>
>
> {{hadoop daemonlog}} is a simple, yet useful tool for debugging.
> However, it does not support https, nor does it support a Kerberized Hadoop 
> cluster.
> Using {{AuthenticatedURL}}, it will be able to support SPNEGO negotiation 
> with a Kerberized name node web ui. It will also fall back to simple 
> authentication if the cluster is not Kerberized.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to