You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-dev@hadoop.apache.org by "Kai Zheng (JIRA)" <ji...@apache.org> on 2013/02/22 12:14:12 UTC

[jira] [Created] (HADOOP-9325) KerberosAuthenticationHandler AuthenticationFilter and should be able to reference Hadoop configurations

Kai Zheng created HADOOP-9325:
---------------------------------

             Summary: KerberosAuthenticationHandler AuthenticationFilter and should be able to reference Hadoop configurations
                 Key: HADOOP-9325
                 URL: https://issues.apache.org/jira/browse/HADOOP-9325
             Project: Hadoop Common
          Issue Type: Improvement
          Components: security
            Reporter: Kai Zheng


In KerberosAuthenticationHandler SPNEGO activities, KerberosName is used to get short name for client principal, which needs in some Kerberos authentication situations to reference translation rules defined in Hadoop configuration file like core-site.xml
as follows:

  <property>
    <name>hadoop.security.auth_to_local</name>
    <value>...</value>
  </property>

Note, this is an issue only if default rule can't meet the requirement and custom rules need to be defined.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira