From dev-return-5678-archive-asf-public=cust-asf.ponee.io@airflow.incubator.apache.org Thu Jul 26 23:40:01 2018 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id A9BA4180621 for ; Thu, 26 Jul 2018 23:40:00 +0200 (CEST) Received: (qmail 55382 invoked by uid 500); 26 Jul 2018 21:39:59 -0000 Mailing-List: contact dev-help@airflow.incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@airflow.incubator.apache.org Delivered-To: mailing list dev@airflow.incubator.apache.org Received: (qmail 55369 invoked by uid 99); 26 Jul 2018 21:39:58 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 26 Jul 2018 21:39:58 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 6B775C5C9B for ; Thu, 26 Jul 2018 21:39:58 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.879 X-Spam-Level: * X-Spam-Status: No, score=1.879 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=2, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd1-us-west.apache.org (amavisd-new); dkim=pass (1024-bit key) header.d=airbnb.com Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id 8YdkbQumh4L5 for ; Thu, 26 Jul 2018 21:39:57 +0000 (UTC) Received: from mail-oi0-f45.google.com (mail-oi0-f45.google.com [209.85.218.45]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTPS id 322435F107 for ; Thu, 26 Jul 2018 21:39:56 +0000 (UTC) Received: by mail-oi0-f45.google.com with SMTP id l10-v6so5622828oii.0 for ; Thu, 26 Jul 2018 14:39:56 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=93ycOpV6kQ+8qkCNjvyZWffjEV9M8msXKEHTQbrEwK4=; b=eOmqiRNRNgydXv2p9hWbY6GAwh9VMui3EIiABI6lwtlUjailmmjCSOuHtNzd4Y2o7E Cy6YRqD/PCgL4GOcve4ceXNs/ZSA9C0KLuaoHavJmiYhOP+lh0YDPSf7IwMkDsf4cp40 7kAT718NdS1NUZhvvgZ4P2BpK/umAB52JDa8voVfpYIzGaqTTFkrfQyBIJhvypVe1FgN jGytFqsvD4ZGWyVAGDaK4IHy8tH75y9EUDYtzzBAmo+Yogwwhuyj0WNGufz6onGvxJ/Y vvYxhHpkW//9b1GEz9+cYe++8LZqDkaYOWutPrnf/NTdy3ZDS1Yr6VQ2Yagj79cHP3+b QAfw== X-Gm-Message-State: AOUpUlFfPH26kn3LgY8pxZoxUtZwiFWd/XFZeyzMoKOZBKqEXbQ+R3kI beuo0WQkD664lIMHKk/ZHpCky3Cr0ZsJss2AYAUmaKEtPeI= X-Google-Smtp-Source: AAOMgpdvHrZe4obuoKM9rZqBNh95a7WXAp6X83zxzf4H15DoP5SPFkZaOimW8XivRW22iA610t9fL4hpQKXHglME9R4= X-Received: by 2002:aca:4288:: with SMTP id p130-v6mr3554256oia.265.1532641194497; Thu, 26 Jul 2018 14:39:54 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a4a:4ac7:0:0:0:0:0 with HTTP; Thu, 26 Jul 2018 14:39:54 -0700 (PDT) In-Reply-To: References: From: Alejandro Fernandez Date: Thu, 26 Jul 2018 14:39:54 -0700 Message-ID: Subject: Re: Kerberos and Airflow To: dev@airflow.incubator.apache.org Content-Type: multipart/alternative; boundary="000000000000f7a2de0571edd5b4" --000000000000f7a2de0571edd5b4 Content-Type: text/plain; charset="UTF-8" I'm also interested in this, especially regarding how to distribute keytabs to Airflow dev boxes. +1 for creating a doc so multiple people can contribute instead of reading email threads. Thanks, Alejandro Fernandez Apache Ambari PMC On Thu, Jul 26, 2018 at 2:31 PM, Taylor Edmiston wrote: > While we're on the topic, I'd love any feedback from Bolke or others who've > used Kerberos with Airflow on this quick guide I put together yesterday. > It's similar to what's in the Airflow docs but instead all on one page > and slightly > expanded. > > https://github.com/astronomerio/airflow-guides/ > blob/master/guides/kerberos.md > (or web version ) > > One thing I'd like to add is a minimal example of how to Kerberize a hook. > > I'd be happy to upstream this as well if it's useful (maybe a Concepts > > Additional Functionality > Kerberos page?) > > Best, > Taylor > > > *Taylor Edmiston* > Blog | CV > | LinkedIn > | AngelList > | Stack Overflow > > > > On Thu, Jul 26, 2018 at 5:18 PM, Driesprong, Fokko > wrote: > > > Hi Ry, > > > > You should ask Bolke de Bruin. He's really experienced with Kerberos and > he > > did also the implementation for Airflow. Beside that he worked also on > > implementing Kerberos in Ambari. Just want to let you know. > > > > Cheers, Fokko > > > > Op do 26 jul. 2018 om 23:03 schreef Ry Walker > > > > > Hi everyone - > > > > > > We have several bigCo's who are considering using Airflow asking into > its > > > support for Kerberos. > > > > > > We're going to work on a proof-of-concept next week, will likely > record a > > > screencast on it. > > > > > > For now, we're looking for any anecdotal information from organizations > > who > > > are using Kerberos with Airflow, if anyone would be willing to share > > their > > > experiences here, or reply to me personally, it would be greatly > > > appreciated! > > > > > > -Ry > > > > > > -- > > > > > > *Ry Walker* | CEO, Astronomer | > > 513.417.2163 | > > > @rywalker | LinkedIn > > > > > > > > > --000000000000f7a2de0571edd5b4--