Uploaded image for project: 'Phoenix'
  1. Phoenix
  2. PHOENIX-6913

Follow up on Jetty/Hadoop kerberos principal hostname/realm issues

    XMLWordPrintableJSON

Details

    • Task
    • Status: Open
    • Major
    • Resolution: Unresolved
    • None
    • None
    • queryserver
    • None

    Description

      With the new Jetty SPNEGO brought in with Avatica 1.20.0 +, we have to do some gymnasitics to get Hadoop to accept the principal.

      Review why Hadoop won't accept some user/host.name format principals, and whether Jetty stripping the realm from the principal as returned by  is a bug or not.

      Also figure out whether having different users with the same username in different realms is even a possibility in Kerberos and Hadoop.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. PHOENIX-6908 KerberosName$NoMatchingRule exception in QueryServer.PhoenixRemoteUserExtractor

          • Major - Major loss of function.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. PHOENIX-6750 Bump Avatica version to 1.21.0 in queryserver

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              Unassigned Unassigned
              stoty Istvan Toth
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated: