Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-4105

the SPNEGO user for secondary namenode should use the web keytab

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.1.0, 2.0.2-alpha
    • Fix Version/s: 1.1.1, 2.0.3-alpha
    • Component/s: None
    • Labels:
      None
    • Hadoop Flags:
      Reviewed

      Description

      This is similar to HDFS-3466 where we made sure the namenode checks for the web keytab before it uses the namenode keytab.

      The same needs to be done for secondary namenode as well.

      String httpKeytab = 
                    conf.get(DFSConfigKeys.DFS_SECONDARY_NAMENODE_KEYTAB_FILE_KEY);
                  if (httpKeytab != null && !httpKeytab.isEmpty()) {
                    params.put("kerberos.keytab", httpKeytab);
                  }
      

        Attachments

        1. HDFS-4105.branch-1.patch
          1 kB
          Arpit Gupta
        2. HDFS-4105.patch
          1 kB
          Arpit Gupta

          Issue Links

            Activity

              People

              • Assignee:
                arpitgupta Arpit Gupta
                Reporter:
                arpitgupta Arpit Gupta
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: