[jira] [Updated] (IMPALA-4978) Impala should set the kerberos principal to the FQDN

["Michael Ho (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/IMPALA-4978?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Michael Ho updated IMPALA-4978:
-------------------------------
    Labels: kerberos security  (was: security)

> Impala should set the kerberos principal to the FQDN
> ----------------------------------------------------
>
>                 Key: IMPALA-4978
>                 URL: https://issues.apache.org/jira/browse/IMPALA-4978
>             Project: IMPALA
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: Impala 2.3.0
>            Reporter: Sailesh Mukil
>            Priority: Major
>              Labels: kerberos, security
>
> Impala calls gethostname() to get the local system's name which is used as a part of the kerberos principal. This usually works fine under most settings, however, this is not guaranteed to return the FQDN of the host under certain settings (Eg: possibly while using a DNS GSLB).
> Impala should attempt to get the FQDN first which can be obtained by using getaddrinfo(), and fallback to gethostname() otherwise. This is the behavior of Hadoop, which we should try to match as closely as possible:
> https://github.com/apache/hadoop/blob/master/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/SecurityUtil.java#L169



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org