Hadoop Common
  1. Hadoop Common
  2. HADOOP-6632

Support for using different Kerberos keys for different instances of Hadoop services

    Details

    • Type: Improvement Improvement
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 0.22.0
    • Component/s: None
    • Labels:
      None

      Description

      We tested using the same Kerberos key for all datanodes in a HDFS cluster or the same Kerberos key for all TaskTarckers in a MapRed cluster. But it doesn't work. The reason is that when datanodes try to authenticate to the namenode all at once, the Kerberos authenticators they send to the namenode may have the same timestamp and will be rejected as replay requests. This JIRA makes it possible to use a unique key for each service instance.

      1. 6632.mr.patch
        2 kB
        Devaraj Das
      2. c6632-05.patch
        19 kB
        Kan Zhang
      3. c6632-07.patch
        19 kB
        Kan Zhang
      4. HADOOP-6632-Y20S-18.patch
        40 kB
        Kan Zhang
      5. HADOOP-6632-Y20S-22.patch
        47 kB
        Jitendra Nath Pandey

        Issue Links

          Activity

          Konstantin Shvachko made changes -
          Status Resolved [ 5 ] Closed [ 6 ]
          Devaraj Das made changes -
          Status Patch Available [ 10002 ] Resolved [ 5 ]
          Fix Version/s 0.22.0 [ 12314296 ]
          Resolution Fixed [ 1 ]
          Kan Zhang made changes -
          Status Open [ 1 ] Patch Available [ 10002 ]
          Kan Zhang made changes -
          Status Patch Available [ 10002 ] Open [ 1 ]
          Kan Zhang made changes -
          Attachment c6632-07.patch [ 12449900 ]
          Kan Zhang made changes -
          Link This issue incorporates MAPREDUCE-1945 [ MAPREDUCE-1945 ]
          Kan Zhang made changes -
          Status Open [ 1 ] Patch Available [ 10002 ]
          Kan Zhang made changes -
          Attachment c6632-05.patch [ 12449571 ]
          Jitendra Nath Pandey made changes -
          Link This issue blocks HDFS-1201 [ HDFS-1201 ]
          Konstantin Boudnik made changes -
          Link This issue blocks HADOOP-6772 [ HADOOP-6772 ]
          Konstantin Boudnik made changes -
          Link This issue blocks HADOOP-6772 [ HADOOP-6772 ]
          Devaraj Das made changes -
          Attachment 6632.mr.patch [ 12439307 ]
          Jitendra Nath Pandey made changes -
          Attachment HADOOP-6632-Y20S-22.patch [ 12439144 ]
          Kan Zhang made changes -
          Field Original Value New Value
          Attachment HADOOP-6632-Y20S-18.patch [ 12438734 ]
          Kan Zhang created issue -

            People

            • Assignee:
              Kan Zhang
              Reporter:
              Kan Zhang
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development