[GitHub] [incubator-linkis] Ritakang0451 commented on issue #1690: How does linkis support Kerberos

[GitBox <gi...@apache.org>]

Ritakang0451 commented on issue #1690:
URL: https://github.com/apache/incubator-linkis/issues/1690#issuecomment-1066118502


   Solution:
   The file system of Hadoop obtained in linkis is implemented through hdfsutils class, so we put Kerberos in this class. Users can see the logic of this class. The login modes supported now are as follows:
   
   
   if(KERBEROS_ENABLE.getValue){
   val path =newFile(KEYTAB_FILE.getValue ， userName +".keytab").getPath
   val user =getKerberosUser(userName)
   UserGroupInformation.setConfiguration(getConfiguration(userName))
   UserGroupInformation.loginUserFromKeytabAndReturnUGI(user， path)
   }else{
   UserGroupInformation.createRemoteUser(userName)
   }
   
   wds.linkis.keytab.enable=true
   wds.linkis.keytab.file=/appcom/keytab/ #keytabPlace a directory that stores the of multiple usersusername.keytabDocuments 
   wds.linkis.keytab.host.enabled=false #Whether the client is authenticated with the principal
   wds.linkis.keytab.host=127.0.0.1#Principle authentication needs to bring the client IP
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@linkis.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@linkis.apache.org
For additional commands, e-mail: dev-help@linkis.apache.org