Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-9296

Authenticating users from different realm without a trust relationship

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Won't Do
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: security
    • Labels:
      None

      Description

      Hadoop Masters (JobTracker and NameNode) and slaves (Data Node and TaskTracker) are part of the Hadoop domain, controlled by Hadoop Active Directory.
      The users belong to the CORP domain, controlled by the CORP Active Directory.
      In the absence of a one way trust from HADOOP DOMAIN to CORP DOMAIN, how will Hadoop Servers (JobTracker, NameNode) authenticate CORP users ?

      The solution and implementation details are in the attachement

        Attachments

        1. multirealm.pdf
          33 kB
          Benoy Antony
        2. HADOOP-9296-1.1.patch
          25 kB
          Benoy Antony
        3. HADOOP-9296.patch
          31 kB
          Benoy Antony
        4. HADOOP-9296.patch
          30 kB
          Benoy Antony

          Issue Links

            Activity

              People

              • Assignee:
                benoyantony Benoy Antony
                Reporter:
                benoyantony Benoy Antony
              • Votes:
                0 Vote for this issue
                Watchers:
                15 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: