[
https://issues.apache.org/jira/browse/IMPALA-4978?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Michael Ho reassigned IMPALA-4978:
----------------------------------
Assignee: (was: Sailesh Mukil)
> Impala should set the kerberos principal to the FQDN
> ----------------------------------------------------
>
> Key: IMPALA-4978
> URL: https://issues.apache.org/jira/browse/IMPALA-4978
> Project: IMPALA
> Issue Type: Bug
> Components: Security
> Affects Versions: Impala 2.3.0
> Reporter: Sailesh Mukil
> Priority: Major
> Labels: security
>
> Impala calls gethostname() to get the local system's name which is used as a
> part of the kerberos principal. This usually works fine under most settings,
> however, this is not guaranteed to return the FQDN of the host under certain
> settings (Eg: possibly while using a DNS GSLB).
> Impala should attempt to get the FQDN first which can be obtained by using
> getaddrinfo(), and fallback to gethostname() otherwise. This is the behavior
> of Hadoop, which we should try to match as closely as possible:
> https://github.com/apache/hadoop/blob/master/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/SecurityUtil.java#L169
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]