[
https://issues.apache.org/jira/browse/SLIDER-474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14158668#comment-14158668
]
Steve Loughran commented on SLIDER-474:
---------------------------------------
bq. Is there an API that allows insight into whether a FileSystem reference is
kerberos based (as opposed to token based)
Not that I can see in the source.
> convert token based authentication to kerberos/keytab based
> -----------------------------------------------------------
>
> Key: SLIDER-474
> URL: https://issues.apache.org/jira/browse/SLIDER-474
> Project: Slider
> Issue Type: Bug
> Components: appmaster, security
> Reporter: Jonathan Maron
> Assignee: Jonathan Maron
>
> The AM communication to HDFS and the localization performed by AM require an
> authenticated identity or delegation tokens. However, tokens require quite a
> bit of management to handle renewal and expiry. It is preferable to leverage
> a keytab and authenticate via kerberos in the AM (the login identity) and use
> that identity for managing the interactions.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
