You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@drill.apache.org by br...@apache.org on 2017/03/16 02:42:09 UTC
drill git commit: Drill 1.10 Securing Drill section updates
Repository: drill
Updated Branches:
refs/heads/gh-pages 1cc194faa -> 42920f268
Drill 1.10 Securing Drill section updates
Project: http://git-wip-us.apache.org/repos/asf/drill/repo
Commit: http://git-wip-us.apache.org/repos/asf/drill/commit/42920f26
Tree: http://git-wip-us.apache.org/repos/asf/drill/tree/42920f26
Diff: http://git-wip-us.apache.org/repos/asf/drill/diff/42920f26
Branch: refs/heads/gh-pages
Commit: 42920f2685ac546623896d7a4b035d58dad08f19
Parents: 1cc194f
Author: Bridget Bevens <bb...@maprtech.com>
Authored: Wed Mar 15 19:40:09 2017 -0700
Committer: Bridget Bevens <bb...@maprtech.com>
Committed: Wed Mar 15 19:40:09 2017 -0700
----------------------------------------------------------------------
...090-configuring-kerberos-auththentication.md | 6 +++---
_docs/img/kerberauthprocess.png | Bin 78559 -> 118447 bytes
_docs/img/plainauthprocess.png | Bin 93994 -> 95524 bytes
_docs/img/securecommunicationpaths.png | Bin 46625 -> 66242 bytes
blog/_posts/2017-03-15-drill-1.10-released.md | 2 +-
5 files changed, 4 insertions(+), 4 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/drill/blob/42920f26/_docs/configure-drill/securing-drill/090-configuring-kerberos-auththentication.md
----------------------------------------------------------------------
diff --git a/_docs/configure-drill/securing-drill/090-configuring-kerberos-auththentication.md b/_docs/configure-drill/securing-drill/090-configuring-kerberos-auththentication.md
index 0266c5e..284f34d 100644
--- a/_docs/configure-drill/securing-drill/090-configuring-kerberos-auththentication.md
+++ b/_docs/configure-drill/securing-drill/090-configuring-kerberos-auththentication.md
@@ -1,6 +1,6 @@
---
title: "Configuring Kerberos Authentication"
-date: 2017-03-16 02:18:28 UTC
+date: 2017-03-16 02:40:10 UTC
parent: "Securing Drill"
---
As of version 1.10, Drill supports Kerberos v5 network security authentication. Kerberos allows trusted hosts to prove their identity over a network to an information system. A Kerberos realm is unique authentication domain. A centralized key distribution center (KDC) coordinates authentication between a clients and servers. Clients and servers obtain and use tickets from the KDC using a special keytab file to communicate with the KDC and prove their identity to gain access to a drillbit. Administrators must create principal (user or server) identities and passwords to ensure the secure exchange of mutual authentication information passed to and from the drillbit.
@@ -95,10 +95,10 @@ Drill must run as a user capable of impersonation. The Kerberos provider in the
auth.keytab:"/etc/drill/conf/drill.keytab"
}
}
+3. Restart the drillbit process on each Drill node.
+ <DRILLINSTALL_HOME>/bin/drillbit.sh restart
-3. Restart the drillbit process on each Drill node.
-`<DRILLINSTALL_HOME>/bin/drillbit.sh restart`
## Using Connection URLs
http://git-wip-us.apache.org/repos/asf/drill/blob/42920f26/_docs/img/kerberauthprocess.png
----------------------------------------------------------------------
diff --git a/_docs/img/kerberauthprocess.png b/_docs/img/kerberauthprocess.png
index 92bb6ac..1c57ede 100644
Binary files a/_docs/img/kerberauthprocess.png and b/_docs/img/kerberauthprocess.png differ
http://git-wip-us.apache.org/repos/asf/drill/blob/42920f26/_docs/img/plainauthprocess.png
----------------------------------------------------------------------
diff --git a/_docs/img/plainauthprocess.png b/_docs/img/plainauthprocess.png
index f078adb..b788d0a 100644
Binary files a/_docs/img/plainauthprocess.png and b/_docs/img/plainauthprocess.png differ
http://git-wip-us.apache.org/repos/asf/drill/blob/42920f26/_docs/img/securecommunicationpaths.png
----------------------------------------------------------------------
diff --git a/_docs/img/securecommunicationpaths.png b/_docs/img/securecommunicationpaths.png
index 72acf0d..df526bb 100644
Binary files a/_docs/img/securecommunicationpaths.png and b/_docs/img/securecommunicationpaths.png differ
http://git-wip-us.apache.org/repos/asf/drill/blob/42920f26/blog/_posts/2017-03-15-drill-1.10-released.md
----------------------------------------------------------------------
diff --git a/blog/_posts/2017-03-15-drill-1.10-released.md b/blog/_posts/2017-03-15-drill-1.10-released.md
index 9d1dcb3..a9ea659 100644
--- a/blog/_posts/2017-03-15-drill-1.10-released.md
+++ b/blog/_posts/2017-03-15-drill-1.10-released.md
@@ -23,7 +23,7 @@ The Web Console displays additional query profile statistics and the Drill versi
Drill implicitly interprets the INT96 timestamp data type in Parquet files when the new `store.parquet.int96_as_timestamp` option is enabled. See [About INT96 Support]({{site.baseurl}}/docs/parquet-format/#about-int96-support).
## Kerberos Authentication
-Drill supports Kerberos authentication between the client and drillbit.
+Drill supports Kerberos authentication between the client and drillbit. See [Configuring Kerberos Authentication]({{site.baseurl}}/docs/configuring-kerberos-authentication/) in the [Securing Drill]({{site.baseurl}}/docs/securing-drill/) section.
A complete list of JIRAs resolved in the 1.10.0 release can be found [here](https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12338769&styleName=Html&projectId=12313820&Create=Create&atl_token=A5KQ-2QAV-T4JA-FDED%7C264858c85b35c3b8ac66b0573aa7e88ffa802c9d%7Clin).