[ 
https://issues.apache.org/jira/browse/HADOOP-15456?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16554002#comment-16554002
 ] 

Elek, Marton commented on HADOOP-15456:
---------------------------------------

Thank you very much the patch [~ajayydv]. Overall it looks good to me, but I 
can't test it as it doesn't apply any more for me. Could you be so kind to 
rebase?

Some other comments based on the patch file:

1. I prefer to keep the Hadoop user as the default user. I think it's a more 
realistic test to use a restricted user by default. But hadoop user can use 
sudo passwordless. Can we use sudo in the command string when we need root 
access? (datanode/jsvc start) 

2. Sleep second part is moved to the kerberos part. I would prefer to keep it 
on the main level not in the KERBEROS_ENABLED block. It could be useful for 
other services.

3. krb5.conf may require ASF license header (if it's acceptable by the kerberos 
client apps)

> create base image for running secure ozone cluster
> --------------------------------------------------
>
>                 Key: HADOOP-15456
>                 URL: https://issues.apache.org/jira/browse/HADOOP-15456
>             Project: Hadoop Common
>          Issue Type: Sub-task
>            Reporter: Ajay Kumar
>            Assignee: Ajay Kumar
>            Priority: Major
>         Attachments: HADOOP-15456-docker-hadoop-runner.001.patch, 
> HADOOP-15456-docker-hadoop-runner.002.patch, secure-ozone.tar
>
>
> Create docker image to run secure ozone cluster.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to