[HDFS-4105] the SPNEGO user for secondary namenode should use the web keytab

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.1.0, 2.0.2-alpha
• Fix Version/s: 1.1.1, 2.0.3-alpha
• Hadoop Flags: Reviewed
• Assignee: Arpit Gupta
• Reporter: Arpit Gupta
• Created: 22/Oct/12 23:19
• Updated: 03/Sep/14 23:06
• Resolved: 17/Nov/12 06:42

Description

This is similar to HDFS-3466 where we made sure the namenode checks for the web keytab before it uses the namenode keytab.

The same needs to be done for secondary namenode as well.

String httpKeytab = 
              conf.get(DFSConfigKeys.DFS_SECONDARY_NAMENODE_KEYTAB_FILE_KEY);
            if (httpKeytab != null && !httpKeytab.isEmpty()) {
              params.put("kerberos.keytab", httpKeytab);
            }

Issue Links

• relates to: HDFS-4540 namenode http server should use the web authentication keytab for spnego principal