flink-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Maximilian Michels (JIRA)" <j...@apache.org>
Subject [jira] [Created] (FLINK-1702) Authenticate via Kerberos from the client only
Date Fri, 13 Mar 2015 16:46:39 GMT
Maximilian Michels created FLINK-1702:
-----------------------------------------

             Summary: Authenticate via Kerberos from the client only
                 Key: FLINK-1702
                 URL: https://issues.apache.org/jira/browse/FLINK-1702
             Project: Flink
          Issue Type: Improvement
            Reporter: Maximilian Michels
            Priority: Minor
             Fix For: 0.9


FLINK-1504 implemented support for Kerberos authentication for HDFS in Flink. Currently, the
authentication has to be performed on every node when the job or task manager comes up. That
implies that all nodes are already authenticated using Kerberos.

For the Hadoop security mechanism it would be sufficient if the Client authenticated once
using Kerberos and received the Hadoop DelegationToken. This Token could then be passed to
all nodes. It would be renewed using the Hadoop security mechanisms.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message