Details
-
Task
-
Status: Closed
-
Critical
-
Resolution: Fixed
-
Impala 3.0, Impala 2.12.0
-
ghx-label-6
Description
Since we've switched to using KRPC from Impala 2.12.0 and Impala 3.0, we found a bug that doesn't allow for kerberized communication if the following flag in krb5.conf is changed from its default of 'rdns=true' to 'rdns=false'.
The current workaround is to set it back to its default of 'true'. Keep in mind that the 'dns_canonicalize_hostname' flag should also be 'true' otherwise the 'rdns' flag will be ignored.
More details on the flag can be found here:
http://web.mit.edu/kerberos/krb5-1.12/doc/admin/conf_files/krb5_conf.html
A fix for this issue is tracked by IMPALA-7298.