[HADOOP-12437] Allow SecurityUtil to lookup alternate hostnames

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.8.0, 3.0.0-alpha1
• Component/s: net, security

Environment

multi-homed

• Hadoop Flags: Reviewed

Release Note

HADOOP-12437 introduces two new configuration settings: hadoop.security.dns.interface and hadoop.security.dns.nameserver. These settings can be used to control how Hadoop service instances look up their own hostname and may be required in some multi-homed environments where hosts are configured with multiple hostnames in DNS or hosts files. They supersede the existing settings dfs.datanode.dns.interface and dfs.datanode.dns.nameserver.

• Assignee: Arpit Agarwal
• Reporter: Arpit Agarwal
• Created: 18/Sep/15 20:41
• Updated: 29/Oct/18 20:45
• Resolved: 24/Sep/15 18:47

Description

The configuration setting dfs.datanode.dns.interface lets the DataNode select its hostname by doing a reverse lookup of IP addresses on the specific network interface. This does not work when /etc/hosts is used to setup alternate hostnames, since DNS#reverseDns only queries the DNS servers.

Issue Links

• breaks: HADOOP-12542 TestDNS fails on Windows after HADOOP-12437.
• relates to: HDFS-7935 Support multi-homed networks when Kerberos security is enabled
• relates to: HBASE-14594 Use new DNS API introduced in HADOOP-12437