Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-4540

namenode http server should use the web authentication keytab for spnego principal

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.0.3-alpha
    • 2.1.0-beta
    • security
    • None
    • Reviewed

    Description

      This is similar to HDFS-4105. in the NameNodeHttpServer.start() initSpnego should look for dfs.web.authentication.kerberos.keytab before using dfs.namenode.keytab.file.

      Attachments

        1. HDFS-4540.patch
          4 kB
          Arpit Gupta
        2. HDFS-4540.patch
          4 kB
          Arpit Gupta
        3. HDFS-4540.patch
          4 kB
          Arpit Gupta
        4. HDFS-4540.patch
          5 kB
          Arpit Gupta
        5. HDFS-4540.patch
          1 kB
          Arpit Gupta
        6. HDFS-4540.patch
          1 kB
          Arpit Gupta

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. HDFS-4105 the SPNEGO user for secondary namenode should use the web keytab

          • Major - Major loss of function.
          • Closed
          relates to

          Improvement - An improvement or enhancement to an existing feature or task. HDFS-4565 use DFSUtil.getSpnegoKeytabKey() to get the spnego keytab key in secondary namenode and namenode http server

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Activity

            People

              arpitgupta Arpit Gupta
              arpitgupta Arpit Gupta
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: