This is an automated email from the ASF dual-hosted git repository.
aajisaka pushed a commit to branch branch-3.2
in repository https://gitbox.apache.org/repos/asf/hadoop.git
The following commit(s) were added to refs/heads/branch-3.2 by this push:
new 9aa78fe HADOOP-17204. Fix typo in Hadoop KMS document. Contributed by
Xieming Li.
9aa78fe is described below
commit 9aa78fe0d23d822ce911f1db00088b4510fd171c
Author: Akira Ajisaka <[email protected]>
AuthorDate: Wed Aug 12 16:08:36 2020 +0900
HADOOP-17204. Fix typo in Hadoop KMS document. Contributed by Xieming Li.
(cherry picked from commit 141c62584bd253f0831d39557f54627f26cef7f7)
---
hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm
b/hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm
index 656e1cf..95e926b 100644
--- a/hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm
+++ b/hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm
@@ -716,7 +716,7 @@ $H4 HTTP Kerberos Principals Configuration
When KMS instances are behind a load-balancer or VIP, clients will use the
hostname of the VIP. For Kerberos SPNEGO authentication, the hostname of the
URL is used to construct the Kerberos service name of the server,
`HTTP/#HOSTNAME#`. This means that all KMS instances must have a Kerberos
service name with the load-balancer or VIP hostname.
-In order to be able to access directly a specific KMS instance, the KMS
instance must also have Keberos service name with its own hostname. This is
required for monitoring and admin purposes.
+In order to be able to access directly a specific KMS instance, the KMS
instance must also have Kerberos service name with its own hostname. This is
required for monitoring and admin purposes.
Both Kerberos service principal credentials (for the load-balancer/VIP
hostname and for the actual KMS instance hostname) must be in the keytab file
configured for authentication. And the principal name specified in the
configuration must be '\*'. For example:
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
