[
https://issues.apache.org/jira/browse/HADOOP-10784?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14068659#comment-14068659
]
Alejandro Abdelnur commented on HADOOP-10784:
---------------------------------------------
[~kellyzly]
The existing doc states how to start/stop KMS and what propertis to set to
configure kerberos.
It does not cover how to create kerberos principals and keytabs (that will
depend on your Kerberos setup).
It does not cover how to use a client other than the KMS client. Though it
would be worthwhile to have a section showing how to use {{curl}} as we are
making the REST API public.
What else do you think it should mentioned in the docs?
BTW, the curl output snippet you shared indicate that you are using kerberos
SPENGO and that is working.
> Need add more in KMS document
> -----------------------------
>
> Key: HADOOP-10784
> URL: https://issues.apache.org/jira/browse/HADOOP-10784
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 2.4.1
> Reporter: liyunzhang
> Priority: Minor
>
> Now i can only find the kms document in
> http://aajisaka.github.io/hadoop-project/hadoop-kms/index.html, but it is
> very simple. for example, i don't know how to enabling Kerberos HTTP SPNEGO
> Authentication although i configure the kms-site.xml according to the
> reference page.
> How to test it ?
> I send following request to KMS server:
> curl -g --header "Authorization:Negotiate123455"
> http://localhost:16000/kms/v1/key/k1
> I read the KMS code and found that i need add parameters in request header
> and the format is "Authorization:Negotiate $token". But how the token is
> generated?
--
This message was sent by Atlassian JIRA
(v6.2#6252)
