Uploaded image for project: 'Apache Lens (Retired)'
  1. Apache Lens (Retired)
  2. LENS-1514

Support HDFS delegation token authentication

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 2.8
    • client, server
    • None

    Description

      As part of LENS-1509, we have added Spnego authentication based on Kerberos to lens. This will work in client-server mode. But this approach will cease to work in a hadoop cluster in which user is using lens client in a mapred job(such as oozie java action) since there will not be keytabs in the hadoop cluster. The authentication in hadoop work on concept of delegation token(https://blog.cloudera.com/blog/2017/12/hadoop-delegation-tokens-explained/).

      Here we are introducing delegation token auth in lens. We are piggybacking on HDFS to do authentication by passing it's token and performing a filesystem operation.

       

      We will add proper delegation token implementation as future improvement.

       

      Attachments

        1. LENS-1514_1.patch
          20 kB
          Barun Kumar

        Activity

          People

            barunsthakur Barun Kumar
            barunsthakur Barun Kumar
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: