Github user justinleet commented on the issue:
https://github.com/apache/incubator-metron/pull/518
Update on this:
After a significant amount of pain involved in making this work, we need to
have the client_jaas.conf and the metron keytab distributed to the various
supervisor nodes so that they can actually be authenticated/authorized as the
metron user.
The best discovered solution to this is to have a client that essentially
just sets them up (so we can actually create things on the various supervisor
servers). It's not ideal, but @dlyle65535 and I are testing that it works.
To actually set this up, just install Metron clients on all Storm
supervisor nodes prior to Kerberization. Docs will be updated once we confirm
that this approach works.
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---
