You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@accumulo.apache.org by "Josh Elser (JIRA)" <ji...@apache.org> on 2015/04/06 05:27:12 UTC

[jira] [Updated] (ACCUMULO-3706) Support SASL/Kerberos based authentication for replication

     [ https://issues.apache.org/jira/browse/ACCUMULO-3706?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Josh Elser updated ACCUMULO-3706:
---------------------------------
    Priority: Blocker  (was: Major)

> Support SASL/Kerberos based authentication for replication
> ----------------------------------------------------------
>
>                 Key: ACCUMULO-3706
>                 URL: https://issues.apache.org/jira/browse/ACCUMULO-3706
>             Project: Accumulo
>          Issue Type: Bug
>          Components: replication
>            Reporter: Josh Elser
>            Assignee: Josh Elser
>            Priority: Blocker
>             Fix For: 1.7.0
>
>
> Right now, a password is baked into the replication configuration (like everything else). Need to support a keytab too.
> To make it work across clusters, need to support authentication as someone other than the system user (likely a principal without an instance).
> I think we'd need to use this principal and wrap the actual replication work in a {{doAs}} to prevent bashing the server's credentials its using for client requests.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)