HBase
  1. HBase
  2. HBASE-3582

HMaster and HRegionServer should be able to login from Kerberos keytab when running on security-enabled Hadoop

    Details

    • Type: Bug Bug
    • Status: Resolved
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 0.90.0, 0.90.1
    • Fix Version/s: 0.90.2
    • Component/s: security
    • Labels:
      None

      Description

      Currently HBase can run on top of Hadoop 0.20 with security APIs, but only using the "simple" authentication method. There is currently no configuration or hooks for the HBase process to obtain Kerberos credentials so it can authenticate against secure Hadoop.

      We should extend the current org.apache.hadoop.hbase.security.User hooks to allow obtaining credentials from a keytab file when security is enabled.

      1. HBASE-3582_0.90.patch
        19 kB
        Gary Helmling
      2. HBASE-3582_trunk.patch
        20 kB
        Gary Helmling

        Issue Links

          Activity

          Hide
          Gary Helmling added a comment -

          Since reviewboard emails don't seem to be getting through, patch is up for review at:

          https://review.cloudera.org/r/1611/

          Show
          Gary Helmling added a comment - Since reviewboard emails don't seem to be getting through, patch is up for review at: https://review.cloudera.org/r/1611/
          Hide
          Andrew Purtell added a comment -

          +1 I say commit it Gary.

          Show
          Andrew Purtell added a comment - +1 I say commit it Gary.
          Hide
          Gary Helmling added a comment -

          Final version of patch applied to 0.90 branch and trunk

          Show
          Gary Helmling added a comment - Final version of patch applied to 0.90 branch and trunk
          Hide
          Gary Helmling added a comment -

          Committed to 0.90 branch and trunk.

          Show
          Gary Helmling added a comment - Committed to 0.90 branch and trunk.
          Hide
          Hudson added a comment -

          Integrated in HBase-TRUNK #1771 (See https://hudson.apache.org/hudson/job/HBase-TRUNK/1771/)

          Show
          Hudson added a comment - Integrated in HBase-TRUNK #1771 (See https://hudson.apache.org/hudson/job/HBase-TRUNK/1771/ )

            People

            • Assignee:
              Gary Helmling
              Reporter:
              Gary Helmling
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development