You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "Michael Ho (JIRA)" <ji...@apache.org> on 2018/11/14 21:21:00 UTC
[jira] [Comment Edited] (IMPALA-7072) Support Kerberos
auth_to_local rules
[ https://issues.apache.org/jira/browse/IMPALA-7072?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16687138#comment-16687138 ]
Michael Ho edited comment on IMPALA-7072 at 11/14/18 9:20 PM:
--------------------------------------------------------------
I think we do: https://www.cloudera.com/documentation/enterprise/release-notes/topics/impala_known_issues.html#impala-7072
I believe there was a bit of misunderstanding in previous update. auth_to_local rules should be supported but we never supported Heimdal Kerberos.
This can probably be closed.
was (Author: kwho):
I think we do: https://www.cloudera.com/documentation/enterprise/release-notes/topics/impala_known_issues.html#impala-7072
I believe there was a bit of misunderstanding in previous update. auth_to_local rules should be supported but we never supported Heimdal Kerberos.
> Support Kerberos auth_to_local rules
> ------------------------------------
>
> Key: IMPALA-7072
> URL: https://issues.apache.org/jira/browse/IMPALA-7072
> Project: IMPALA
> Issue Type: New Feature
> Components: Security
> Affects Versions: Impala 2.12.0
> Reporter: Sailesh Mukil
> Priority: Major
> Labels: kerberos
>
> On deployments that use Heimdal kerberos configured with 'auth_to_local' rules set, and with the Impala startup flag 'use_kudu_kinit'= true, the auth_to_local rules will not be respected as it's not supported with Kudu's kinit.
> The implication of this is that from Impala 2.12.0 onwards, clusters with the above configuration will not be able to use KRPC with kerberos enabled.
> A workaround is to get rid of the auth_to_local rules for such deployments.
> We need to have a good long term solution to fix this.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org