[
https://issues.apache.org/jira/browse/HDFS-14327?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16795196#comment-16795196
]
Íñigo Goiri commented on HDFS-14327:
------------------------------------
Thanks [~fengnanli] for [^HDFS-14327.001.patch].
We may want to rename the JIRA to something about using FQDN instead of IPs
Right now there is no much about security itself.
If we want to go there, we probably would need a full test which leverage
MiniKDC or so.
Regarding the patch itself, I would like to keep the old tests with addresses
and add the FQDNs ones separately.
Can we also fix the check styles and complete the javadocs?
> Support security for DNS resolving
> ----------------------------------
>
> Key: HDFS-14327
> URL: https://issues.apache.org/jira/browse/HDFS-14327
> Project: Hadoop HDFS
> Issue Type: Improvement
> Reporter: Fengnan Li
> Assignee: Fengnan Li
> Priority: Major
> Attachments: HDFS-14327.001.patch
>
>
> The DNS resolving, clients will get the IP of the servers (NN/Routers) and
> use the IP addresses to access the machine. This will fail in secure
> environment as Kerberos is using the domain name in the principal so it won't
> recognize the IP addresses.
> This task is mainly adding a reverse look up on the current basis and get the
> domain name after the IP is fetched. After that clients will still use the
> domain name to access the servers.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
