You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@spark.apache.org by "Marcelo Vanzin (JIRA)" <ji...@apache.org> on 2019/01/11 00:01:00 UTC

[jira] [Created] (SPARK-26595) Allow delegation token renewal without a keytab

Marcelo Vanzin created SPARK-26595:
--------------------------------------

             Summary: Allow delegation token renewal without a keytab
                 Key: SPARK-26595
                 URL: https://issues.apache.org/jira/browse/SPARK-26595
             Project: Spark
          Issue Type: New Feature
          Components: Spark Core
    Affects Versions: 2.4.0
            Reporter: Marcelo Vanzin


Currently the delegation token renewal feature requires the user to provide Spark with a keytab.

It would be nice for this to also be supported when the user doesn't have a keytab, as long as the user keeps a valid kerberos login. Spark has access to the user's credential cache in that case, and can keep tokens updated much like in the keytab case.

It's not as automatic as with keytabs, but can help in some environments.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org