accumulo-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Alex Moundalexis (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (ACCUMULO-1898) Report if security is enabled, both in master log and monitor.
Date Fri, 15 Nov 2013 19:23:21 GMT

    [ https://issues.apache.org/jira/browse/ACCUMULO-1898?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13823980#comment-13823980
] 

Alex Moundalexis commented on ACCUMULO-1898:
--------------------------------------------

Seems none of my customers are on 1.5.0+ yet.

Any confirmation of Accumulo attempt/success to use Kerberos would be helpful, especially
at startup.

Most of my pains in configuring Kerberos were caused by lack of information. There's currently
nothing in the monitor, logs, or anywhere else; even if it's buried in a log somewhere, status
would be good thing.

Bare minimum, there ought to be some sort of confirmation in the master's log at start-up.
Realize the implementation is vastly different in that it makes an external call to kinit,
but ideally there'd be a line when we first attempt to kinit and then log the results (good,
bad, etc).

For comparison the NN logs the following upon success:

10/10/25 17:01:46 INFO security.UserGroupInformation: 
Login successful for user hdfs/fully.qualified.domain.name@YOUR-REALM.COM using keytab file
/etc/hadoop/conf/hdfs.keytab



> Report if security is enabled, both in master log and monitor.
> --------------------------------------------------------------
>
>                 Key: ACCUMULO-1898
>                 URL: https://issues.apache.org/jira/browse/ACCUMULO-1898
>             Project: Accumulo
>          Issue Type: Improvement
>          Components: master, monitor
>    Affects Versions: 1.4.3
>            Reporter: Alex Moundalexis
>            Priority: Minor
>              Labels: kerberos, monitor, security
>
> Inform the user if Accumulo is running atop a cluster secured with Kerberos.
> 1. on the monitor, similar to how the NameNode does currently.
> 2. in the master log, upon startup
> A little confirmation can make all the difference in the world.



--
This message was sent by Atlassian JIRA
(v6.1#6144)

Mime
View raw message