Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-10982

KMS: Support for multiple Kerberos principals

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 3.0.0-alpha1
    • 2.6.0
    • None
    • None
    • Reviewed

    Description

      The Key Management Server should support multiple Kerberos principals.

      This is required for KMS multi instance setups behind a VIP. In such scenarios there must a principal with the VIP hostname and one with the actual hostname of the KMS instance. Regular users will use the VIP entry point, monitoring agents must hit a specific instance.

      Attachments

        1. HADOOP-10982.patch
          3 kB
          Alejandro Abdelnur
        2. HADOOP-10982.patch
          8 kB
          Alejandro Abdelnur
        3. HADOOP-10982.patch
          8 kB
          Alejandro Abdelnur
        4. HADOOP-10982.patch
          8 kB
          Alejandro Abdelnur

        Issue Links

          is blocked by

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-11016 KMS should support signing cookies with zookeeper secret manager

          • Major - Major loss of function.
          • Closed
          is duplicated by

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-11018 KMS should load multiple kerberos principals

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              tucu00 Alejandro Abdelnur
              andrew.wang Andrew Wang
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: