[HDFS-7935] Support multi-homed networks when Kerberos security is enabled

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Arun Suresh
• Reporter: Arun Suresh
• Created: 16/Mar/15 08:20
• Updated: 16/Nov/15 20:16

Description

Currently, during SASL negotiation stage between ipc Client and Server, The server sends only a single serviceId (curresponding to a single principal) to the client. This is the principal the the server process is logged in as during startup.

It is possible that in a multi-homed network, the server might be associated with more than one principal, and thus severs must provide the clients all possible principals it can use to connect to.

Issue Links

• is related to: HADOOP-12437 Allow SecurityUtil to lookup alternate hostnames