[HADOOP-9868] Server must not advertise kerberos realm

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 2.1.1-beta, 3.0.0-alpha1
• Fix Version/s: 2.1.1-beta
• Component/s: ipc
• Target Version/s: 2.1.1-beta
• Hadoop Flags: Reviewed
• Assignee: Daryn Sharp
• Reporter: Daryn Sharp
• Created: 13/Aug/13 13:40
• Updated: 12/May/16 18:22
• Resolved: 15/Aug/13 19:43

Description

HADOOP-9789 broke kerberos authentication by making the RPC server advertise the kerberos service principal realm. SASL clients and servers do not support specifying a realm, so it must be removed from the advertisement.