[
https://issues.apache.org/jira/browse/HDFS-14390?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16819200#comment-16819200
]
Ashvin commented on HDFS-14390:
-------------------------------
Hi [~daryn] I wanted to follow up on this issue. I have uploaded a new patch,
[^HDFS-14390.004.patch]. As discussed earlier, the patch includes just the
changes required to enable secure connection to the {{AliasMap}} server and
fixes the image generation tool used for provided storage, see {{FSTreeWalk}}.
Auth related changes will be part of a new PR.
Summary: When authentication method is {{Kerberos}}, a client (DN/NN in this
case) invokes {{SaslRpcClient.getServerPrincipal}} to setup a secure
connection. If {{Provided storage}} is also enabled, the {{getServerPrincipal}}
method tries to find server principal for the {{AliasMap}} protocol. It was
missing earlier. This change, see {{AliasMapProtocolPB}}, provides the server
principal. No other components or paths will be impacted by this change.
> Provide kerberos support for AliasMap service used by Provided storage
> ----------------------------------------------------------------------
>
> Key: HDFS-14390
> URL: https://issues.apache.org/jira/browse/HDFS-14390
> Project: Hadoop HDFS
> Issue Type: Improvement
> Reporter: Ashvin
> Assignee: Ashvin
> Priority: Major
> Attachments: HDFS-14390.001.patch, HDFS-14390.002.patch,
> HDFS-14390.003.patch, HDFS-14390.004.patch
>
>
> With {{PROVIDED}} storage (-HDFS-9806)-, HDFS can address data stored in
> external storage systems. This feature is not supported in a secure HDFS
> cluster. The {{AliasMap}} service does not support kerberos, and as a result
> the cluster nodes will fail to communicate with it. This JIRA is to enable
> kerberos support for the {{AliasMap}} service.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
