[HBASE-3582] HMaster and HRegionServer should be able to login from Kerberos keytab when running on security-enabled Hadoop

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.90.0, 0.90.1
• Fix Version/s: 0.90.2
• Component/s: security
• Assignee: Gary Helmling
• Reporter: Gary Helmling
• Created: 28/Feb/11 21:53
• Updated: 20/Nov/15 12:43
• Resolved: 05/Mar/11 01:14

Description

Currently HBase can run on top of Hadoop 0.20 with security APIs, but only using the "simple" authentication method. There is currently no configuration or hooks for the HBase process to obtain Kerberos credentials so it can authenticate against secure Hadoop.

We should extend the current org.apache.hadoop.hbase.security.User hooks to allow obtaining credentials from a keytab file when security is enabled.

Issue Links

• relates to: ACCUMULO-404 Support running on-top of Kerberos-enabled HDFS