[HADOOP-9841] Manageable login configuration and options for UGI

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Labels: Rhino
• Assignee: Kai Zheng
• Reporter: Kai Zheng
• Created: 06/Aug/13 10:22
• Updated: 03/Sep/13 07:27

Description

As discussed in HADOOP-9797, it would be better to improve UGI incrementally. Currently in UGI implementation, it’s not easy to add or change login configuration and the options for relevant login modules dynamically. This is to address the issue, make login configuration manageable, and convert existing JAAS login configurations with their login module options into new way. Double check to make sure the converting is equivalent and doesn’t break.

Issue Links

• depends upon: HADOOP-9840 Improve User class for UGI and decouple it from Kerberos
• Is contained by: HADOOP-9797 Pluggable and compatible UGI change
• is depended upon by: HADOOP-9926 Authentication specific login implementation in separate class from UGI