[SENTRY-1736] Generic service client should support Kerberos

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 2.0.0
• Component/s: Sentry
• Assignee: Krishna Kalyan
• Reporter: Alex Kolbasov
• Created: 29/Apr/17 10:09
• Updated: 24/Jul/17 17:51
• Resolved: 19/May/17 05:07

Description

The SentryGenericServiceClientDefaultImpl has the following comment in constructor:

    //TODO(kalyan) need to find appropriate place to add it
    // if (kerberos) {
    //  // since the client uses hadoop-auth, we need to set kerberos in
    //  // hadoop-auth if we plan to use kerberos
    //  conf.set(HADOOP_SECURITY_AUTHENTICATION, SentryConstants.KERBEROS_MoODE);
    // }

This should be actually implemented.

Issue Links

• is duplicated by: SENTRY-1766 Generic model clients using kerberos can no longer connect to Sentry server
• is related to: SENTRY-1766 Generic model clients using kerberos can no longer connect to Sentry server
• relates to: SENTRY-1593 Implement client failover for Generic and NN clients
• relates to: SENTRY-1777 Generic clients are not able to connect to sentry server with kerberos enabled.
• links to: Review Board Link for this case