Details
Description
Currently we use a custom login module in UnixUserGroupInformation for acquiring user-credentials (via config or exec'ing 'whoami'). We should switch to using standard JAAS components such as LoginContext and possibly implement a custom UnixLoginContext for our current requirements. In future we can use this for Kerberos etc.
Attachments
Attachments
Issue Links
- blocks
-
HADOOP-4850 Fix IPC Client to not use UGI
- Resolved
-
HDFS-905 Make changes to HDFS for the new UserGroupInformation APIs (HADOOP-6299)
- Closed
-
MAPREDUCE-1385 Make changes to MapReduce for the new UserGroupInformation APIs (HADOOP-6299)
- Closed
- is depended upon by
-
HBASE-2016 [DAC] Authentication
- Closed
- relates to
-
HADOOP-4487 Security features for Hadoop
- Closed