You are viewing a plain text version of this content. The canonical link for it is here.
Posted to yarn-issues@hadoop.apache.org by "Jian He (JIRA)" <ji...@apache.org> on 2017/11/20 19:40:00 UTC
[jira] [Commented] (YARN-6669) Kerberos support for native service
AM with the service REST API
[ https://issues.apache.org/jira/browse/YARN-6669?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16259732#comment-16259732 ]
Jian He commented on YARN-6669:
-------------------------------
Changes include:
- YARN-7517. Make registry client to programmatically generate the jaas conf for secure access
- Create a KerberosPrincipal resource object in REST API for user to supply keberos keytab and principal
- User has two ways to configure:
-- If keytab starts with "hdfs://", the keytab will be localized by YARN
-- If keytab starts with "file://", it is assumed that the keytab are available on the localhost.
- ServiceClient is changed to ask hdfs delegation token when submitting the service
- AM code will use the tokens when launching containers
> Kerberos support for native service AM with the service REST API
> ----------------------------------------------------------------
>
> Key: YARN-6669
> URL: https://issues.apache.org/jira/browse/YARN-6669
> Project: Hadoop YARN
> Issue Type: Sub-task
> Reporter: Jian He
> Assignee: Jian He
> Attachments: YARN-6669.yarn-native-services.01.patch, YARN-6669.yarn-native-services.03.patch, YARN-6669.yarn-native-services.04.patch, YARN-6669.yarn-native-services.05.patch
>
>
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org