[
https://issues.apache.org/jira/browse/NIFI-1488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15192517#comment-15192517
]
Alan Jackoway commented on NIFI-1488:
-------------------------------------
1) I believe users should be supplying core-site.xml to both Hadoop and HBase
processes regardless of whether Kerberos is on or off, since pretty much any
code using Configuration expects and will try to include it off the classpath
without you knowing:
https://github.com/apache/hadoop/blob/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/conf/Configuration.java#L677
2) You are most likely right that to use multiple HBase Services, we may need
something like doAs.
3) It seems like we are over-validating the principal name, but the Hadoop
processors don't validate it at all, setting a user up to accidentally try to
authenticate as something like '[email protected] ' with a space at the end and
then be confused by why it failed. However, if we can't find a reliable source
of what principals can contain, it may be better to pull that validation out
and just let it fail when people use ones that don't work.
> Add Kerberos Support to HBase processors
> ----------------------------------------
>
> Key: NIFI-1488
> URL: https://issues.apache.org/jira/browse/NIFI-1488
> Project: Apache NiFi
> Issue Type: Improvement
> Affects Versions: 0.4.0, 0.4.1
> Reporter: Bryan Bende
> Assignee: Ricky Saltzer
> Fix For: 0.6.0
>
> Attachments:
> 0001-NIFI-1488-Adjusting-unused-imports-and-adding-licens.patch
>
>
> Our current HBase integration does not support communicating with a
> Kerberized HBase install. We should support this just like we do for the HDFS
> processors.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
