[
https://issues.apache.org/jira/browse/HDFS-14327?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16795232#comment-16795232
]
Fengnan Li commented on HDFS-14327:
-----------------------------------
[~elgoiri] Thanks for the review!
I am completely with you that this patch doesn't add much security features,
and instead it is more of the flavor of making the DNS resolving compatible
with the current Kerberos common setup. From that perspective renaming the Jira
makes more sense.
I will create a separate test and fix the check styles and javadocs.
> Support security for DNS resolving
> ----------------------------------
>
> Key: HDFS-14327
> URL: https://issues.apache.org/jira/browse/HDFS-14327
> Project: Hadoop HDFS
> Issue Type: Improvement
> Reporter: Fengnan Li
> Assignee: Fengnan Li
> Priority: Major
> Attachments: HDFS-14327.001.patch
>
>
> The DNS resolving, clients will get the IP of the servers (NN/Routers) and
> use the IP addresses to access the machine. This will fail in secure
> environment as Kerberos is using the domain name in the principal so it won't
> recognize the IP addresses.
> This task is mainly adding a reverse look up on the current basis and get the
> domain name after the IP is fetched. After that clients will still use the
> domain name to access the servers.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
