Thanks Larry! ________________________________ From: larry mccay <lmc...@apache.org> Sent: Tuesday, October 6, 2020 4:53 PM To: user@knox.apache.org <user@knox.apache.org> Subject: Re: Kerberos Delegation
Hi Jeff - No, Knox is a trusted proxy in the Hadoop ecosystem and uses that pattern with Livy as well as the other ecosystem services to strongly authenticate as Knox and assert the identity of the authenticated user via doAs query param. HTH, --larry On Tue, Oct 6, 2020 at 6:27 PM jeff saremi <jeffsar...@hotmail.com<mailto:jeffsar...@hotmail.com>> wrote: Does anyone know if Knox uses Kerberos Delegation when forwarding requests to say Livy? Is it capable of doing so if not doing it already? thanks, jeff