You are viewing a plain text version of this content. The canonical link for it is here.

Posted to hdfs-issues@hadoop.apache.org by "Kai Zheng (JIRA)" <ji...@apache.org> on 2013/09/02 21:26:51 UTC

[jira] [Updated] (HDFS-5152) Avoiding redundant Kerberos login for Zookeeper client in ActiveStandbyElector

     [ https://issues.apache.org/jira/browse/HDFS-5152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Kai Zheng updated HDFS-5152:
----------------------------

    Attachment: HDFS-5152.patch

Attached a patch. Pending to be submitted when required patches get in.
                
> Avoiding redundant Kerberos login for Zookeeper client in ActiveStandbyElector
> ------------------------------------------------------------------------------
>
>                 Key: HDFS-5152
>                 URL: https://issues.apache.org/jira/browse/HDFS-5152
>             Project: Hadoop HDFS
>          Issue Type: Improvement
>          Components: security
>            Reporter: Kai Zheng
>         Attachments: HDFS-5152.patch
>
>
> Based on the fix in HADOOP-8315, it's possible to deploy a secured HA cluster with SASL support for connection with Zookeeper. However it requires extra configuration for JAAS to initialize the Zookeeper client because the client will do another login in it even when ZKFC service actually has already passed the Kerberos login during its starting.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira