[
https://issues.apache.org/jira/browse/LENS-1514?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Barun Kumar updated LENS-1514:
------------------------------
Attachment: LENS-1514_1.patch
> Support HDFS delegation token authentication
> --------------------------------------------
>
> Key: LENS-1514
> URL: https://issues.apache.org/jira/browse/LENS-1514
> Project: Apache Lens
> Issue Type: Improvement
> Components: client, server
> Reporter: Barun Kumar
> Assignee: Barun Kumar
> Priority: Major
> Attachments: LENS-1514_1.patch
>
>
> As part of LENS-1509, we have added Spnego authentication based on Kerberos
> to lens. This will work in client-server mode. But this approach will cease
> to work in a hadoop cluster in which user is using lens client in a mapred
> job(such as oozie java action) since there will not be keytabs in the hadoop
> cluster. The authentication in hadoop work on concept of delegation
> token([https://blog.cloudera.com/blog/2017/12/hadoop-delegation-tokens-explained/).]
> Here we are introducing delegation token auth in lens. We are piggybacking on
> HDFS to do authentication by passing it's token and performing a filesystem
> operation.
>
> We will add proper delegation token implementation as future improvement.
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
