joshelser commented on a change in pull request #20: PHOENIX-5772 Streamline
the kerberos logic in thin client java code
URL: https://github.com/apache/phoenix-queryserver/pull/20#discussion_r391832724
##########
File path: bin/thin_client_jaas.conf
##########
@@ -0,0 +1,5 @@
+ThinClient {
+ com.sun.security.auth.module.Krb5LoginModule required
Review comment:
I think these options are OK...
https://www.ibm.com/support/knowledgecenter/SSYKE2_7.1.0/com.ibm.java.security.api.71.doc/jgss/com/ibm/security/auth/module/Krb5LoginModule.html
seems to indicate that it's actually `useKeytab` on IBM.
Probably easiest to just acknowledge that we only expect this to work on
openjdk/oraclejdk (and maybe azul?). All of those have the exact same JAAS
config semantics for krb5, AFAIK.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
With regards,
Apache Git Services
