[jira] [Updated] (HADOOP-12847) hadoop daemonlog should support https and SPNEGO for Kerberized cluster

["Wei-Chiu Chuang (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HADOOP-12847?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Wei-Chiu Chuang updated HADOOP-12847:
-------------------------------------
    Attachment: HADOOP-12847.002.patch

Rev02: this revision adds an option to select HTTP or HTTPS and test cases.
* I basically rewrote the client side to make it more complete. The client side SSL config (keystore/truststore) comes from Hadoop configuration files.
* Rewrote the test cases to validate client command options, and run tests using both HTTP and HTTPS.
* Updated docs to reflect the additional command line parameter.
* server side is unchanged.

I did not add tests for SPENGO authentication and this code does not automatically reads Kerberos keytab to login, as it's way too complex and beyond my current understanding of Hadoop. The user of this code has to run {{kinit}} before running this command.

> hadoop daemonlog should support https and SPNEGO for Kerberized cluster
> -----------------------------------------------------------------------
>
>                 Key: HADOOP-12847
>                 URL: https://issues.apache.org/jira/browse/HADOOP-12847
>             Project: Hadoop Common
>          Issue Type: New Feature
>            Reporter: Wei-Chiu Chuang
>            Assignee: Wei-Chiu Chuang
>         Attachments: HADOOP-12847.001.patch, HADOOP-12847.002.patch
>
>
> {{hadoop daemonlog}} is a simple, yet useful tool for debugging.
> However, it does not support https, nor does it support a Kerberized Hadoop cluster.
> Using {{AuthenticatedURL}}, it will be able to support SPNEGO negotiation with a Kerberized name node web ui. It will also fall back to simple authentication if the cluster is not Kerberized.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)