Details
-
Improvement
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
Description
We tested using the same Kerberos key for all datanodes in a HDFS cluster or the same Kerberos key for all TaskTarckers in a MapRed cluster. But it doesn't work. The reason is that when datanodes try to authenticate to the namenode all at once, the Kerberos authenticators they send to the namenode may have the same timestamp and will be rejected as replay requests. This JIRA makes it possible to use a unique key for each service instance.
Attachments
Attachments
Issue Links
- blocks
-
HDFS-1201 Support for using different Kerberos keys for Namenode and datanode.
- Closed
- incorporates
-
MAPREDUCE-1945 Support for using different Kerberos keys for Jobtracker and TaskTrackers
- Closed