[
https://issues.apache.org/jira/browse/KUDU-2096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16142341#comment-16142341
]
Todd Lipcon commented on KUDU-2096:
-----------------------------------
I think we should set up such a cluster wth Kerberos on, with the master using
a CNAME and do a couple end-to-end tests including Impala configured to connect
via the CNAME. Since Impala uses both the C++ and Java clients I think this
should be pretty good assurance that the whole thing is working as expected.
Let me know if you are interested in helping with this -- otherwise I can try
to find time to do it in the several weeks (but maybe not in time for the 1.5
release itself).
> Document necessary configuration for Kerberos with master CNAMEs
> ----------------------------------------------------------------
>
> Key: KUDU-2096
> URL: https://issues.apache.org/jira/browse/KUDU-2096
> Project: Kudu
> Issue Type: Task
> Components: documentation, security
> Reporter: Todd Lipcon
>
> Currently our docs recommend using CNAMEs for master addresses to simplify
> moving them around. However, if clients connect to a master with its
> non-canonical name, there are some complications with Kerberos principals,
> etc. We should test and document the necessary steps for such a configuration.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
