[HADOOP-8867] always use canonical host name for kerberos _HOST macro expansion

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.0.1-alpha
• Component/s: security
• Assignee: Unassigned
• Reporter: Moritz Moeller
• Created: 30/Sep/12 15:31
• Updated: 30/Sep/12 20:27

Description

right now SecurityUtil.replacePattern is called with the verbatim configured hostname, not with the canonicalized form.

without this patch the hostnames in the configuration must be canonical, with this patch one can use cname aliases (we use a cname alias for the namenode).