[HADOOP-9938] Avoiding redundant Kerberos login for Zookeeper client in ActiveStandbyElector

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Assignee: Unassigned
• Reporter: Kai Zheng
• Created: 30/Aug/13 23:07
• Updated: 06/Sep/13 16:56

Description

Based on the fix in HADOOP-8315, it's possible to deploy a secured HA cluster with SASL support for connection with Zookeeper. However it requires extra configuration for JAAS to initialize the Zookeeper client because the client will do another login in it even when ZKFC service actually has already passed the Kerberos login during its starting.

Issue Links

• requires: ZOOKEEPER-1749 Login outside of Zookeeper client
• requires: HADOOP-8315 Support SASL-authenticated ZooKeeper in ActiveStandbyElector