Hi Dominique,

It should work. This is because the authentication mechanism (password or
certificate) is between the client and KDC (kerberos server). Hadoop never
knows about the password or certificate.  The Hadoop servers receive a
service ticket from the client. Client obtains  service ticket from KDC.
Thus the authentication mechanism ((password or certificate) is between the
client and KDC.

Though I have not used a certificate for authentication, I had used a 2FA
based kerberos authentication. Instead of password , it was Pin and a
token.
The process was like this

>kinit username

Enter pin and token

> hadoop fs -ls





On Mon, Mar 26, 2018 at 6:36 AM, Dominique De Vito <[email protected]>
wrote:

> Hi,
>
> Well, Hadoop with authentication works with login/password-pattern
> Kerberos .
>
> However, Kerberos could work with certicate-based authentication too.
>
> Is Hadoop supporting Kerberos authentication with certificate?
> To be more precise (or straight to the point, if you want): is Hadoop
> working when using certificate-based Kerberos authentication ?
>
> Is there any Hadoop cluster out there running with certificate-based
> Kerberos authentication?
>
> Thanks.
>
> Regards,
> Dominique
>
>

Reply via email to