You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by "Kai Zheng (JIRA)" <ji...@apache.org> on 2013/02/25 03:02:12 UTC

[jira] [Updated] (HADOOP-9325) KerberosAuthenticationHandler and AuthenticationFilter should be able to reference Hadoop configurations

     [ https://issues.apache.org/jira/browse/HADOOP-9325?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Kai Zheng updated HADOOP-9325:
------------------------------

    Summary: KerberosAuthenticationHandler and AuthenticationFilter should be able to reference Hadoop configurations  (was: KerberosAuthenticationHandler AuthenticationFilter and should be able to reference Hadoop configurations)
    
> KerberosAuthenticationHandler and AuthenticationFilter should be able to reference Hadoop configurations
> --------------------------------------------------------------------------------------------------------
>
>                 Key: HADOOP-9325
>                 URL: https://issues.apache.org/jira/browse/HADOOP-9325
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>            Reporter: Kai Zheng
>
> In KerberosAuthenticationHandler SPNEGO activities, KerberosName is used to get short name for client principal, which needs in some Kerberos authentication situations to reference translation rules defined in Hadoop configuration file like core-site.xml
> as follows:
>   <property>
>     <name>hadoop.security.auth_to_local</name>
>     <value>...</value>
>   </property>
> Note, this is an issue only if default rule can't meet the requirement and custom rules need to be defined.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira