[IGNITE-6747] Use _HOST instead of FDQN when configuring principal for IgfsSecondaryFileSystem with kerberos enable

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 2.2
• Component/s: hadoop
• Assignee: Unassigned
• Reporter: Reid Chan
• Created: 25/Oct/17 04:55
• Updated: 14/Feb/19 13:46
• Resolved: 14/Feb/19 13:46

Description

So far, igfs can access to kerberized hdfs by providing keyTab and keyTabPrincipal:

<property name="keyTab" value="/path/to/keytab"/>
<property name="keyTabPrincipal" value="ignite/fully.qualified.domain.name@REALM"/>

But it becomes nightmare when number of grid nodes is more than hundreds or even thousands which is in my case, since i have to configure FDQN for each node.
Hadoop's package already provides an easy way which uses "_HOST" instead of FDQN, i think it's better to use it:

<property name="keyTabPrincipal" value="ignite/_HOST@REALM"/>

and the "_HOST" will be replaced with respective machine's host name.

Suggestions are welcomed.

Issue Links

• links to: GitHub Pull Request #2922