[ 
https://issues.apache.org/jira/browse/HADOOP-15765?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16618425#comment-16618425
 ] 

Jianfei Jiang edited comment on HADOOP-15765 at 9/18/18 3:31 AM:
-----------------------------------------------------------------

I add a patch, it just make the value of os.login.module.name and 
os.principal.class in class UserGroupInformation configurable.

However in class KerberosAuthenticator, it also have similiar codes and should 
change to configurable, in this class, there is no given conf and cannot load 
Configuration like UserGroupInformation do. One way to make the value in 
KerberosAuthenticator is to set system environment, I dont think it is a good 
approach. Any advice?


was (Author: jiangjianfei):
I add a patch, it just make the value of [[os.login.module.name]] and 
[[os.principal.class]] in class [[UserGroupInformation]] configurable.

 

However in class [[KerberosAuthenticator]], it also have similiar codes and 
should change to configurable, in this class, there is no given conf and cannot 
load Configuration like UserGroupInformation do. One way to make the value in 
KerberosAuthenticator is to set system environment, I dont think it is a good 
approach. Any advice?

> Can not find login module class for IBM due to hard codes
> ---------------------------------------------------------
>
>                 Key: HADOOP-15765
>                 URL: https://issues.apache.org/jira/browse/HADOOP-15765
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>            Reporter: Jianfei Jiang
>            Priority: Major
>         Attachments: HADOOP-15765_000.patch
>
>
> As the differences between various versions of IBM, the login module class is 
> sometimes different. However, the class for specified jdk (no matter the 
> version) is hard coded in Hadoop code. We have faced the error like following:
> *javax.security.auth.login.LoginException: unable to find LoginModule class: 
> com.ibm.security.auth.module.LinuxLoginModule*
>  
> Should we set the value as a config which can be set by users?



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to