[jira] [Commented] (IMPALA-9361) Support running kerberized minicluster against manually configured KDC

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/IMPALA-9361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17235093#comment-17235093 ] 

ASF subversion and git services commented on IMPALA-9361:
---------------------------------------------------------

Commit 63da9ccf0c64188a6cdd01ef8d88cfbd0c81fc9a in impala's branch refs/heads/master from Attila Doroszlai
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=63da9cc ]

IMPALA-10340: Cannot set up KDC from scratch

IMPALA-9361 added experimental support for setting up a KDC for the mini
cluster.  However, the experimental-kerberos-setup.sh script fails with
the error:

  KRB5_CONFIG: unbound variable

The problem is that impala-config.sh unsets KDC-related variables if the
cluster is not kerberized or does not exist.  However, kerberized
cluster cannot be created without installing KDC first.

This change updates impala-config.sh to allow setting the KDC-related
variables if IMPALA_KERBERIZE is set to 'true' and the cluster does not
exist yet.

Testing:
 * successfully set up KDC via experimental-kerberos-setup.sh after
   building Impala locally
 * verified that impala-config.sh sets/unsets KDC-related variables
   depending on cluster existence and config
 * started Kerberized and non-Kerberized mini clusters (after
   regenerating configs)

Change-Id: Icaed2ad2fb1e1b60951a5a4138a9386588bc6972
Reviewed-on: http://gerrit.cloudera.org:8080/16744
Reviewed-by: Tim Armstrong <ta...@cloudera.com>
Tested-by: Impala Public Jenkins <im...@cloudera.com>


> Support running kerberized minicluster against manually configured KDC
> ----------------------------------------------------------------------
>
>                 Key: IMPALA-9361
>                 URL: https://issues.apache.org/jira/browse/IMPALA-9361
>             Project: IMPALA
>          Issue Type: Sub-task
>          Components: Infrastructure
>            Reporter: Tim Armstrong
>            Assignee: Tim Armstrong
>            Priority: Major
>             Fix For: Impala 3.4.0
>
>
> An initial step towards kerberized minicluster support is to at least allow running the services with kerberos enabled using the KDC from the OS vendor and manual tweaks.
> I was able to get this working with various limitations and tweaks, so I plan to add a script and documentation for the process.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org