[HADOOP-15440] Support kerberos principal name pattern for KerberosAuthenticationHandler

• Type: Improvement
• Status: Patch Available
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Assignee: Xiaoqiao He
• Reporter: Xiaoqiao He
• Created: 02/May/18 16:02
• Updated: 24/Mar/20 03:38

Description

When setup HttpFS server or KMS server in security mode, we have to config kerberos principal for these service, it doesn't support to convert Kerberos principal name pattern to valid Kerberos principal names whereas NameNode/DataNode and many other service can do that, so it makes confused for users. so I propose to replace hostname pattern with hostname, which should be fully-qualified domain name.