Andrew Wong created KUDU-3057:
---------------------------------

             Summary: Allow users to pass keytabs to CLI tooling
                 Key: KUDU-3057
                 URL: https://issues.apache.org/jira/browse/KUDU-3057
             Project: Kudu
          Issue Type: Improvement
          Components: CLI, security
            Reporter: Andrew Wong


In scripting tooling, it's inconvenient to require an explicit `kinit` before 
running tooling against a secure cluster. It'd be nice if a user could instead 
pass the keytab as an argument to tools.

This would also allow us to use an [in-memory credentials 
cache|https://web.mit.edu/kerberos/krb5-1.12/doc/basic/ccache_def.html] as we 
do in the server, so we wouldn't "leak" credentials to the system-wide 
file-based credentials cache.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to