[
https://issues.apache.org/jira/browse/HDFS-9804?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Xiao Chen updated HDFS-9804:
----------------------------
Attachment: HDFS-9804.01.patch
Patch 1 attached allows the Balancer to login using a keytab.
- New configurations are added to support this feature. This is disabled by
default, so backwards-compatible.
- In the Balancer, {{SecurityUtil#login}} is used to login with keytab.
- Added a test to verify that logging in from a keytab, the balancer can do
exactly the same work as without kerberos. I reused the existing
{{testUnknownDatanode}} for basic functionality testing, and mimicked
{{TestSecureNNWithQJM#init}} to setup a kerberized minicluster.
- Added minor information to {{UGI#hasSufficientTimeElapsed}} which I found
helpful when identifying this issue.
I also manually tested that this works in a testing cluster - update the config
and start the balancer, the balancer stays logged-in.
Please review and let me know your thoughts. Thanks!
> Allow long-running Balancer in Kerberized Environments
> ------------------------------------------------------
>
> Key: HDFS-9804
> URL: https://issues.apache.org/jira/browse/HDFS-9804
> Project: Hadoop HDFS
> Issue Type: New Feature
> Reporter: Xiao Chen
> Assignee: Xiao Chen
> Attachments: HDFS-9804.01.patch
>
>
> From the discussion of HDFS-9698, it might be nice to allow the balancer to
> run as a daemon and login from a keytab.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
