[IMPALA-9367] Allow specifying MEMORY kerberos credential cache

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Won't Do
• Component/s: Security
• Labels: kerberos
• Target Version: Impala 3.4.0
• Epic Color: ghx-label-14
• Assignee: Tim Armstrong
• Reporter: Tim Armstrong
• Created: 07/Feb/20 23:38
• Updated: 10/Feb/20 18:01
• Resolved: 10/Feb/20 18:01

Description

Currently --krb5_ccname defaults to "/tmp/krb5cc_impala_internal" and requires that the argument be an absolute path.

Kudu actually defaults to "MEMORY:kudu" as its credential cache, which may have some advantages, e.g. it doesn't depend on the filesystem.

It would be reasonable to allow setting the credential cache type to MEMORY.

Issue Links

• relates to: IMPALA-9359 Recover gracefully from corrupt kerberos credential cache