[HAWQ-1644] Switch PXF to support keytab configuration via pxf-env and make delegation token optional

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: PXF
• Assignee: Shivram Mani
• Reporter: Shivram Mani
• Created: 31/Jul/18 21:24
• Updated: 30/Aug/18 18:57

Description

1. For secure hadoop, configure all secure specific configurations in pxf-env as opposed to pxf-site.

2. Make delegation token property option for PXF when used against secure hadoop. Delegation token is a complementary means for authentication with hadoop along with Kerberos. There is not much value in using the delegation token with segment only PXF architecture, as each pxf jvm will need to establish the token anyway. Simply authenticating with Keberos should be good enough in such a deployment mode.

Issue Links

• links to: GitHub Pull Request #1383