[HDFS-7546] Document, and set an accepting default for dfs.namenode.kerberos.principal.pattern

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.1.1-beta
• Fix Version/s: 2.8.0, 2.7.1, 3.0.0-alpha1
• Component/s: security
• Labels: supportability
• Target Version/s: 2.7.0
• Assignee: Harsh J
• Reporter: Harsh J
• Created: 18/Dec/14 11:18
• Updated: 07/Feb/24 20:34
• Resolved: 09/Feb/15 21:59

Description

This config is used in the SaslRpcClient, and the no-default breaks cross-realm trust principals being used at clients.

Current location: https://github.com/apache/hadoop/blob/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/SaslRpcClient.java#L309

The config should be documented and the default should be set to * to preserve the prior-to-introduction behaviour.

Issue Links

• is related to: HDDS-10328 Support cross realm Kerberos out of box
• relates to: HADOOP-9789 Support server advertised kerberos principals