Uploaded image for project: 'Apache Lens'
  1. Apache Lens
  2. LENS-1514

Support HDFS delegation token authentication

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.8
    • Component/s: client, server
    • Labels:
      None

      Description

      As part of LENS-1509, we have added Spnego authentication based on Kerberos to lens. This will work in client-server mode. But this approach will cease to work in a hadoop cluster in which user is using lens client in a mapred job(such as oozie java action) since there will not be keytabs in the hadoop cluster. The authentication in hadoop work on concept of delegation token(https://blog.cloudera.com/blog/2017/12/hadoop-delegation-tokens-explained/).

      Here we are introducing delegation token auth in lens. We are piggybacking on HDFS to do authentication by passing it's token and performing a filesystem operation.

       

      We will add proper delegation token implementation as future improvement.

       

        Attachments

          Activity

            People

            • Assignee:
              barunsthakur Barun Kumar
              Reporter:
              barunsthakur Barun Kumar
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: