[HADOOP-8098] KerberosAuthenticatorHandler should use _HOST replacement to resolve principal name

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.23.2, 0.24.0
• Fix Version/s: 2.0.0-alpha
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Alejandro Abdelnur
• Reporter: Alejandro Abdelnur
• Created: 21/Feb/12 18:48
• Updated: 23/May/12 20:15
• Resolved: 28/Feb/12 18:47

Description

Currently the exact Kerberos principal name has to be set in the configuration of each node.

KerberosAuthenticatorHandler should do similar logic as the RPC ports to support HTTP/_HOST@REALM

Issue Links

• requires: HADOOP-8100 share web server information for http filters