You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@knox.apache.org by jeff saremi <je...@hotmail.com> on 2020/10/06 22:26:55 UTC

Kerberos Delegation

Does anyone know if Knox uses Kerberos Delegation when forwarding requests to say Livy? Is it capable of doing so if not doing it already?

thanks,
jeff

Re: Kerberos Delegation

Posted by jeff saremi <je...@hotmail.com>.

Thanks Larry!
________________________________
From: larry mccay <lm...@apache.org>
Sent: Tuesday, October 6, 2020 4:53 PM
To: user@knox.apache.org <us...@knox.apache.org>
Subject: Re: Kerberos Delegation

Hi Jeff -

No, Knox is a trusted proxy in the Hadoop ecosystem and uses that pattern with Livy as well as the other ecosystem services to strongly authenticate as Knox and assert the identity of the authenticated user via doAs query param.

HTH,

--larry

On Tue, Oct 6, 2020 at 6:27 PM jeff saremi <je...@hotmail.com>> wrote:
Does anyone know if Knox uses Kerberos Delegation when forwarding requests to say Livy? Is it capable of doing so if not doing it already?

thanks,
jeff

Re: Kerberos Delegation

Posted by larry mccay <lm...@apache.org>.

Hi Jeff -

No, Knox is a trusted proxy in the Hadoop ecosystem and uses that pattern
with Livy as well as the other ecosystem services to strongly authenticate
as Knox and assert the identity of the authenticated user via doAs query
param.

HTH,

--larry

On Tue, Oct 6, 2020 at 6:27 PM jeff saremi <je...@hotmail.com> wrote:

> Does anyone know if Knox uses Kerberos Delegation when forwarding requests
> to say Livy? Is it capable of doing so if not doing it already?
>
> thanks,
> jeff
>