[HADOOP-9054] Add AuthenticationHandler that uses Kerberos but allows for an alternate form of authentication for browsers

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.3-alpha
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Robert Kanter
• Reporter: Robert Kanter
• Created: 16/Nov/12 22:21
• Updated: 10/Oct/17 18:55
• Resolved: 07/Dec/12 18:50

Description

It would be useful for some Oozie users if, when using Kerberos, that browser access to the oozie web UI could be authenticated in a different way (w/o Kerberos). This may be useful for other projects using Hadoop-Auth, so this feature is to add a new AuthenticationHandler that uses Kerberos by default, unless a browser (user-agents are configurable) is used, in which case some other form of authentication can be used.

Issue Links

• relates to: OOZIE-1103 Create example using AltKerberosAuthenticationHandler
• relates to: YARN-4006 YARN AltKerberos HTTP Authentication doesn't work