[SLIDER-474] convert token based authentication to kerberos/keytab based

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Slider 0.60
• Component/s: appmaster, security
• Sprint: Slider October #2
• Assignee: Jonathan Maron
• Reporter: Jonathan Maron
• Created: 02/Oct/14 17:09
• Updated: 24/Oct/14 20:26
• Resolved: 13/Oct/14 17:28

Description

The AM communication to HDFS and the localization performed by AM require an authenticated identity or delegation tokens. However, tokens require quite a bit of management to handle renewal and expiry. It is preferable to leverage a keytab and authenticate via kerberos in the AM (the login identity) and use that identity for managing the interactions.

Issue Links

• breaks: SLIDER-497 Secure funtests failing: no keytab