Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-9927

USER_KERBEROS_LOGIN in UGI should use Krb5LoginModule as REQUIRED, instead of OPTIONAL

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Major
    • Resolution: Unresolved
    • None
    • None
    • security
    • None

    Description

      Krb5LoginModule should be used as a required login module in the JAAS chain for user to login via ticket cache in secured/Kerberos deployment. It's probably a work around to pass various unit tests, however it's obviously problematic and should be fixed. It's possible when relevant UGI changes are ready and MiniKDC can be employed to help with the tests with HADOOP-9893 being done.

      Attachments

        Issue Links

          Is contained by

          Sub-task - The sub-task of the issue HADOOP-9797 Pluggable and compatible UGI change

          • Major - Major loss of function.
          • Open

          Activity

            People

              drankye Kai Zheng
              drankye Kai Zheng
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated: