[
https://issues.apache.org/jira/browse/FLINK-12130?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Victor Wong updated FLINK-12130:
--------------------------------
Description:
Currently if the user configures Kerberos credentials through command line, it
won't work.
{code:java}
// flink run -m yarn-cluster -yD security.kerberos.login.keytab=/path/to/keytab
-yD security.kerberos.login.principal=xxx /path/to/test.jar
{code}
Above command would cause security failure if you do not have a ticket cache w/
kinit.
Maybe we could call
_org.apache.flink.client.cli.AbstractCustomCommandLine#applyCommandLineOptionsToConfiguration_
before _SecurityUtils.install(new SecurityConfiguration(cli.configuration));_
Here is a demo patch:
[https://github.com/jiasheng55/flink/commit/f2c63b97bdb7d6067deb7a48caf72958abb2903a]
was:
Currently if the user configures Kerberos credentials through command line, it
won't work.
{code:java}
// flink run -m yarn-cluster -yD security.kerberos.login.keytab=/path/to/keytab
-yD security.kerberos.login.principal=xxx /path/to/test.jar
{code}
Maybe we could call
_org.apache.flink.client.cli.AbstractCustomCommandLine#applyCommandLineOptionsToConfiguration_
** before _SecurityUtils.install(new
SecurityConfiguration(cli.configuration));_
Here is a demo patch:
[https://github.com/jiasheng55/flink/commit/f2c63b97bdb7d6067deb7a48caf72958abb2903a]
> Apply command line options to configuration before install security modules
> ---------------------------------------------------------------------------
>
> Key: FLINK-12130
> URL: https://issues.apache.org/jira/browse/FLINK-12130
> Project: Flink
> Issue Type: Improvement
> Components: Command Line Client
> Reporter: Victor Wong
> Priority: Major
>
> Currently if the user configures Kerberos credentials through command line,
> it won't work.
> {code:java}
> // flink run -m yarn-cluster -yD
> security.kerberos.login.keytab=/path/to/keytab -yD
> security.kerberos.login.principal=xxx /path/to/test.jar
> {code}
> Above command would cause security failure if you do not have a ticket cache
> w/ kinit.
> Maybe we could call
> _org.apache.flink.client.cli.AbstractCustomCommandLine#applyCommandLineOptionsToConfiguration_
> before _SecurityUtils.install(new
> SecurityConfiguration(cli.configuration));_
> Here is a demo patch:
> [https://github.com/jiasheng55/flink/commit/f2c63b97bdb7d6067deb7a48caf72958abb2903a]
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
