You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by "Yu Gao (JIRA)" <ji...@apache.org> on 2013/04/01 11:29:15 UTC

[jira] [Created] (HADOOP-9446) Support Kerberos HTTP SPNEGO authentication for non-SUN JDK

Yu Gao created HADOOP-9446:
------------------------------

             Summary: Support Kerberos HTTP SPNEGO authentication for non-SUN JDK
                 Key: HADOOP-9446
                 URL: https://issues.apache.org/jira/browse/HADOOP-9446
             Project: Hadoop Common
          Issue Type: Improvement
          Components: security
    Affects Versions: 2.0.2-alpha, 1.1.1
            Reporter: Yu Gao
            Assignee: Yu Gao


Class KerberosAuthenticator and KerberosAuthenticationHandler currently only support running with SUN JDK when Kerberos is enabled. In order to support  alternative JDKs like IBM JDK which has different options supported by Krb5LoginModule and different login module classes, the HTTP Kerberos authentication classes need to be changed.

In addition, NT_GSS_KRB5_PRINCIPAL, which is used in KerberosAuthenticator to get the corresponding oid instance, is a field defined in SUN JDK, but not in IBM JDK.

This JIRA is to fix the existing problems and add support for Kerberos HTTP SPNEGO authentication with non-SUN　JDK.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira