[
https://issues.apache.org/jira/browse/IMPALA-7299?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16849996#comment-16849996
]
ASF subversion and git services commented on IMPALA-7299:
---------------------------------------------------------
Commit 97ca8d1f4c24c21ba65b036580e27606bf4c939b in impala's branch
refs/heads/2.x from Alex Rodoni
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=97ca8d1 ]
IMPALA-7299: [DOCS] A known issue with IMPALA-7298
Kerberos authentication fails with the reverse DNS lookup disabled.
Change-Id: I5b8104a2747b4e8051d4bdcab906486444680218
Reviewed-on: http://gerrit.cloudera.org:8080/10952
Reviewed-by: Sailesh Mukil <[email protected]>
Tested-by: Impala Public Jenkins <[email protected]>
Reviewed-on: http://gerrit.cloudera.org:8080/13449
Reviewed-by: Alex Rodoni <[email protected]>
> Impala fails to work with the krb5 config 'rdns=false' in Impala 2.12.0/3.0
> ---------------------------------------------------------------------------
>
> Key: IMPALA-7299
> URL: https://issues.apache.org/jira/browse/IMPALA-7299
> Project: IMPALA
> Issue Type: Task
> Components: Docs
> Affects Versions: Impala 3.0, Impala 2.12.0
> Reporter: Sailesh Mukil
> Assignee: Alex Rodoni
> Priority: Critical
> Labels: docs
> Fix For: Impala 3.1.0
>
>
> Since we've switched to using KRPC from Impala 2.12.0 and Impala 3.0, we
> found a bug that doesn't allow for kerberized communication if the following
> flag in krb5.conf is changed from its default of 'rdns=true' to 'rdns=false'.
> The current workaround is to set it back to its default of 'true'. Keep in
> mind that the 'dns_canonicalize_hostname' flag should also be 'true'
> otherwise the 'rdns' flag will be ignored.
> More details on the flag can be found here:
> http://web.mit.edu/kerberos/krb5-1.12/doc/admin/conf_files/krb5_conf.html
> A fix for this issue is tracked by IMPALA-7298.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
