[
https://issues.apache.org/jira/browse/FLUME-2557?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14218380#comment-14218380
]
Joey Echeverria commented on FLUME-2557:
----------------------------------------
In the patch I added a check that the current user has Kerberos credentials:
{code:java}
if (currentUser != null && currentUser.hasKerberosCredentials())
{code}
before we compare the current user to the final principal. If there are no
kerberos credentials, we always want to do a login from the keytab. The only
case where we don't is if the principal and keytab are null (not set in the
flume.conf) which I added a check for at the beginning of the login() method.
> DatasetSink doesn't work with Kerberos
> --------------------------------------
>
> Key: FLUME-2557
> URL: https://issues.apache.org/jira/browse/FLUME-2557
> Project: Flume
> Issue Type: Bug
> Components: Sinks+Sources
> Affects Versions: v1.5.2
> Reporter: Joey Echeverria
> Assignee: Joey Echeverria
> Fix For: v1.6.0
>
> Attachments: FLUME-2557.patch
>
>
> When configuring Kerberos, you'll get an error such as:
> Sink kite-dataset has been removed due to an error during configuration
> org.apache.flume.sink.kite.KerberosUtil$SecurityException: Cannot use
> multiple Kerberos principals:
> flume/[email protected] would replace flume
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
