[
https://issues.apache.org/jira/browse/HADOOP-16996?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Maziar Mirzazad updated HADOOP-16996:
-------------------------------------
Description:
With current hadoop client implementation, every single service need to add
UGI.loginFromKeyTab() before doing HDFS or M/R API calls.
To avoid that, we are proposing adding Keytab based login to hadoop client
library for Kerberized clusters with configurable default paths for Keytabs.
This improvement should avoid extra login tries in case a valid TGT is
available.
was:
At Twitter we are planning to Kerberize our hadoop infrastructure, and we have
many services that are going to use those clusters.
With current hadoop client implementation, every single service need to change
the application and add UGI.loginFromKeyTab() before doing HDFS or M/R API
calls.
To avoid that, we are proposing adding Keytab based login to hadoop client
library for Kerberized clusters with configurable default paths for Keytabs.
This improvement should avoid extra login tries in case a valid TGT is
available.
> Add capability in hadoop-client to automatically login from a client/service
> keytab
> -----------------------------------------------------------------------------------
>
> Key: HADOOP-16996
> URL: https://issues.apache.org/jira/browse/HADOOP-16996
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 2.0.0-alpha
> Reporter: Maziar Mirzazad
> Priority: Minor
> Fix For: 2.9.2
>
>
> With current hadoop client implementation, every single service need to add
> UGI.loginFromKeyTab() before doing HDFS or M/R API calls.
> To avoid that, we are proposing adding Keytab based login to hadoop client
> library for Kerberized clusters with configurable default paths for Keytabs.
> This improvement should avoid extra login tries in case a valid TGT is
> available.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
