Hello Kudu Jenkins, Todd Lipcon,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/8247
to look at the new patch set (#2).
Change subject: Allow configuration of values passed into kerberos env vars
......................................................................
Allow configuration of values passed into kerberos env vars
We always used hardcoded constants for the following kerberos
environment variables:
KRB5CCNAME and KRB5RCACHETYPE.
This patch allows for the configuration of these variables by taking
arguments to InitKerberosForServer().
Callsites within Kudu have not been changed as all the parameters have
default values.
The motivation for this patch is that, Impala as a user of the
KuduRPC and Kudu security libraries, needs to have a file based
credential cache since the kinit happens on the C++ side and this cache
needs to be read by the Java side too. Hence, we cannot have it in memory.
Also, Impala still requires replay protection, since some Impala services
use Thrift which lacks the nonce mechanism that KRPC uses for replay
protection.
Change-Id: Iab4ce72c04ec4056dc89fb4c1c540a6fdaca4404
---
M src/kudu/security/init.cc
M src/kudu/security/init.h
2 files changed, 19 insertions(+), 12 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/47/8247/2
--
To view, visit http://gerrit.cloudera.org:8080/8247
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: Iab4ce72c04ec4056dc89fb4c1c540a6fdaca4404
Gerrit-Change-Number: 8247
Gerrit-PatchSet: 2
Gerrit-Owner: Sailesh Mukil <[email protected]>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Sailesh Mukil <[email protected]>
Gerrit-Reviewer: Todd Lipcon <[email protected]>
