Uploaded image for project: 'IMPALA'
  1. IMPALA
  2. IMPALA-4978

Impala should set the kerberos principal to the FQDN

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: Impala 2.3.0
    • Fix Version/s: None
    • Component/s: Security
    • Labels:

      Description

      Impala calls gethostname() to get the local system's name which is used as a part of the kerberos principal. This usually works fine under most settings, however, this is not guaranteed to return the FQDN of the host under certain settings (Eg: possibly while using a DNS GSLB).

      Impala should attempt to get the FQDN first which can be obtained by using getaddrinfo(), and fallback to gethostname() otherwise. This is the behavior of Hadoop, which we should try to match as closely as possible:
      https://github.com/apache/hadoop/blob/master/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/SecurityUtil.java#L169

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              sailesh Sailesh Mukil
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated: