Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-9296

Authenticating users from different realm without a trust relationship

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Won't Do
    • None
    • None
    • security
    • None

    Description

      Hadoop Masters (JobTracker and NameNode) and slaves (Data Node and TaskTracker) are part of the Hadoop domain, controlled by Hadoop Active Directory.
      The users belong to the CORP domain, controlled by the CORP Active Directory.
      In the absence of a one way trust from HADOOP DOMAIN to CORP DOMAIN, how will Hadoop Servers (JobTracker, NameNode) authenticate CORP users ?

      The solution and implementation details are in the attachement

      Attachments

        1. HADOOP-9296.patch
          30 kB
          Benoy Antony
        2. HADOOP-9296.patch
          31 kB
          Benoy Antony
        3. HADOOP-9296-1.1.patch
          25 kB
          Benoy Antony
        4. multirealm.pdf
          33 kB
          Benoy Antony

        Issue Links

          Activity

            People

              benoyantony Benoy Antony
              benoyantony Benoy Antony
              Votes:
              0 Vote for this issue
              Watchers:
              15 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: