[jira] [Updated] (IMPALA-7072) Kudu's kinit does not support auth_to_local rules with Heimdal kerberos
[ https://issues.apache.org/jira/browse/IMPALA-7072?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Tim Armstrong updated IMPALA-7072: -- Priority: Major (was: Critical) > Kudu's kinit does not support auth_to_local rules with Heimdal kerberos > --- > > Key: IMPALA-7072 > URL: https://issues.apache.org/jira/browse/IMPALA-7072 > Project: IMPALA > Issue Type: Bug > Components: Security >Affects Versions: Impala 2.12.0 >Reporter: Sailesh Mukil >Assignee: Sailesh Mukil >Priority: Major > > On deployments that use Heimdal kerberos configured with 'auth_to_local' > rules set, and with the Impala startup flag 'use_kudu_kinit'= true, the > auth_to_local rules will not be respected as it's not supported with Kudu's > kinit. > The implication of this is that from Impala 2.12.0 onwards, clusters with the > above configuration will not be able to use KRPC with kerberos enabled. > A workaround is to get rid of the auth_to_local rules for such deployments. > We need to have a good long term solution to fix this. -- This message was sent by Atlassian JIRA (v7.6.3#76005) - To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org For additional commands, e-mail: issues-all-h...@impala.apache.org
[jira] [Updated] (IMPALA-7072) Kudu's kinit does not support auth_to_local rules with Heimdal kerberos
[ https://issues.apache.org/jira/browse/IMPALA-7072?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Tim Armstrong updated IMPALA-7072: -- Issue Type: New Feature (was: Bug) > Kudu's kinit does not support auth_to_local rules with Heimdal kerberos > --- > > Key: IMPALA-7072 > URL: https://issues.apache.org/jira/browse/IMPALA-7072 > Project: IMPALA > Issue Type: New Feature > Components: Security >Affects Versions: Impala 2.12.0 >Reporter: Sailesh Mukil >Assignee: Sailesh Mukil >Priority: Major > > On deployments that use Heimdal kerberos configured with 'auth_to_local' > rules set, and with the Impala startup flag 'use_kudu_kinit'= true, the > auth_to_local rules will not be respected as it's not supported with Kudu's > kinit. > The implication of this is that from Impala 2.12.0 onwards, clusters with the > above configuration will not be able to use KRPC with kerberos enabled. > A workaround is to get rid of the auth_to_local rules for such deployments. > We need to have a good long term solution to fix this. -- This message was sent by Atlassian JIRA (v7.6.3#76005) - To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org For additional commands, e-mail: issues-all-h...@impala.apache.org
[jira] [Updated] (IMPALA-7072) Kudu's kinit does not support auth_to_local rules with Heimdal kerberos
[ https://issues.apache.org/jira/browse/IMPALA-7072?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Tim Armstrong updated IMPALA-7072: -- Target Version: Product Backlog > Kudu's kinit does not support auth_to_local rules with Heimdal kerberos > --- > > Key: IMPALA-7072 > URL: https://issues.apache.org/jira/browse/IMPALA-7072 > Project: IMPALA > Issue Type: Bug > Components: Security >Affects Versions: Impala 2.12.0 >Reporter: Sailesh Mukil >Assignee: Sailesh Mukil >Priority: Critical > > On deployments that use Heimdal kerberos configured with 'auth_to_local' > rules set, and with the Impala startup flag 'use_kudu_kinit'= true, the > auth_to_local rules will not be respected as it's not supported with Kudu's > kinit. > The implication of this is that from Impala 2.12.0 onwards, clusters with the > above configuration will not be able to use KRPC with kerberos enabled. > A workaround is to get rid of the auth_to_local rules for such deployments. > We need to have a good long term solution to fix this. -- This message was sent by Atlassian JIRA (v7.6.3#76005) - To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org For additional commands, e-mail: issues-all-h...@impala.apache.org
[jira] [Updated] (IMPALA-7072) Kudu's kinit does not support auth_to_local rules with Heimdal kerberos
[ https://issues.apache.org/jira/browse/IMPALA-7072?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sailesh Mukil updated IMPALA-7072: -- Summary: Kudu's kinit does not support auth_to_local rules with Heimdal kerberos (was: Kudu's kinit does not support auth_to_config rules with Heimdal kerberos) > Kudu's kinit does not support auth_to_local rules with Heimdal kerberos > --- > > Key: IMPALA-7072 > URL: https://issues.apache.org/jira/browse/IMPALA-7072 > Project: IMPALA > Issue Type: Bug > Components: Security >Affects Versions: Impala 2.12.0 >Reporter: Sailesh Mukil >Assignee: Sailesh Mukil >Priority: Critical > > On deployments that use Heimdal kerberos configured with 'auth_to_local' > rules set, and with the Impala startup flag 'use_kudu_kinit'= true, the > auth_to_local rules will not be respected as it's not supported with Kudu's > kinit. > The implication of this is that from Impala 2.12.0 onwards, clusters with the > above configuration will not be able to use KRPC with kerberos enabled. > A workaround is to get rid of the auth_to_local rules for such deployments. > We need to have a good long term solution to fix this. -- This message was sent by Atlassian JIRA (v7.6.3#76005) - To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org For additional commands, e-mail: issues-all-h...@impala.apache.org
