[KNOX-474] Improve Kerberos config validation and diagnostics at startup

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.4.0
• Fix Version/s: 1.3.0
• Component/s: Server
• Labels: security
• Assignee: Sandor Molnar
• Reporter: Kevin Minder
• Created: 01/Dec/14 15:30
• Updated: 21/Oct/19 14:24
• Resolved: 05/Mar/19 15:36

Description

In gateway-site.xml, if gateway.hadoop.kerberos.secured=true

1. Complain or fail to start if there is a kinited principal.
2. Complain or fail to start if the file referenced via java.security.krb5.conf cannot be read.
3. Complain or fail to start if the file referenced via java.security.auth.login.config cannot be read.
4. Read the file referenced via java.security.auth.login.config complain or fail to start if the keyTab file referenced in the com.sun.security.jgss.initiate section there cannot be read.

Issue Links

• links to: GitHub Pull Request #62