You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Larry McCay (JIRA)" <ji...@apache.org> on 2017/11/29 12:32:00 UTC
[jira] [Commented] (HADOOP-15075) Implement KnoxSSO for hadoop web
UIs (hdfs, yarn, history server etc.)
[ https://issues.apache.org/jira/browse/HADOOP-15075?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16270672#comment-16270672 ]
Larry McCay commented on HADOOP-15075:
--------------------------------------
[~rmadhu877] - Please take a look at using JWTRedirectAuthenticationHandler. Which is in the hadoop-auth module within hadoop-common-project.
HADOOP-11717 introduced this handler specifically for use with KnoxSSO.
You will need to enable kerberos on the end HTTP ports but it will use the alternate mechanism of redirecting to a URL from which a JWT based cookie will be returned.
I will close this as Won't Fix - feel free to reopen it if you need to.
> Implement KnoxSSO for hadoop web UIs (hdfs, yarn, history server etc.)
> ----------------------------------------------------------------------
>
> Key: HADOOP-15075
> URL: https://issues.apache.org/jira/browse/HADOOP-15075
> Project: Hadoop Common
> Issue Type: New Feature
> Components: hdfs-client, security
> Affects Versions: 3.0.0-alpha3
> Reporter: madhu raghavendra
> Fix For: site
>
> Original Estimate: 504h
> Remaining Estimate: 504h
>
> Need to implement Knox SSO login feature for hadoop webUIs like HDFS Namenode, Yarn RM, MR2 Job history server, spark etc. I know that we have SPNEGO feature enabled, however having Knox SSO login feature seems to be a good option
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org