[HADOOP-9325] KerberosAuthenticationHandler and AuthenticationFilter should be able to reference Hadoop configurations

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Tags: AuthFilter SPNEGO KerberosAuthenticationHandler AuthenticationFilter
• Assignee: Unassigned
• Reporter: Kai Zheng
• Created: 22/Feb/13 11:12
• Updated: 27/Feb/13 01:58

Description

In KerberosAuthenticationHandler SPNEGO activities, KerberosName is used to get short name for client principal, which needs in some Kerberos authentication situations to reference translation rules defined in Hadoop configuration file like core-site.xml
as follows:

<property>
<name>hadoop.security.auth_to_local</name>
<value>...</value>
</property>

Note, this is an issue only if default rule can't meet the requirement and custom rules need to be defined.