You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lens.apache.org by "Barun Kumar (JIRA)" <ji...@apache.org> on 2018/05/23 15:45:00 UTC
[jira] [Updated] (LENS-1514) Support HDFS delegation token
authentication
[ https://issues.apache.org/jira/browse/LENS-1514?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Barun Kumar updated LENS-1514:
------------------------------
Summary: Support HDFS delegation token authentication (was: Support HDFS delegation token suthentication)
> Support HDFS delegation token authentication
> --------------------------------------------
>
> Key: LENS-1514
> URL: https://issues.apache.org/jira/browse/LENS-1514
> Project: Apache Lens
> Issue Type: Improvement
> Components: client, server
> Reporter: Barun Kumar
> Assignee: Barun Kumar
> Priority: Major
>
> As part of LENS-1509, we have added Spnego authentication based on Kerberos to lens. This will work in client-server mode. But this approach will cease to work in a hadoop cluster in which user is using lens client in a mapred job(such as oozie java action) since there will not be keytabs in the hadoop cluster. The authentication in hadoop work on concept of delegation token([https://blog.cloudera.com/blog/2017/12/hadoop-delegation-tokens-explained/).]
> Here we are introducing delegation token auth in lens. We are piggybacking on HDFS to do authentication by passing it's token and performing a filesystem operation.
>
> We will add proper delegation token implementation as future improvement.
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)