[HADOOP-10784] Need add more in KMS document

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 2.4.1
• Component/s: security
• Assignee: Unassigned
• Reporter: liyunzhang
• Created: 04/Jul/14 08:57
• Updated: 22/Jul/14 05:56

Description

Now i can only find the kms document in http://aajisaka.github.io/hadoop-project/hadoop-kms/index.html, but it is very simple. for example, i don't know how to enabling Kerberos HTTP SPNEGO Authentication although i configure the kms-site.xml according to the reference page.

How to test it ?
I send following request to KMS server:
curl -g --header "Authorization:Negotiate123455" http://localhost:16000/kms/v1/key/k1

I read the KMS code and found that i need add parameters in request header and the format is "Authorization:Negotiate $token". But how the token is generated?