[ZOOKEEPER-1422] Support _HOST substitution in JAAS configuration

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Implemented
• Affects Version/s: 3.4.0
• Assignee: Mark Fenes
• Reporter: Thomas Weise
• Created: 16/Mar/12 02:03
• Updated: 18/Jan/18 16:54
• Resolved: 18/Jan/18 16:54

Description

At the moment a JAAS configuration file needs to be created with the Kerberos principal specified as user/host. It would be much easier for deployment automation if the host portion could be resolved at startup time, as supported in Hadoop (something like user/_HOST instead of user/hostname). A configuration alternative to global JAAS conf would be even better (via direct properties in zoo.cfg?).

Issue Links

• relates to: ZOOKEEPER-938 Support Kerberos authentication of clients.
• relates to: HBASE-4791 Allow Secure Zookeeper JAAS configuration to be programmatically set (rather than only by reading JAAS configuration file)