I think you can also use Kerberos in the standalone mode in 1.1.x, but is is more tricky - you need do a "kinit" on every host where you launch a Flink process.

Flink 1.2 has better Kerberos support.

On Fri, Jan 6, 2017 at 4:19 AM, Zhangrucong <zhangrucong@huawei.com> wrote:

Hi Stephan:

          Thanks for your reply.

You mean the CLIJMTMWebUI  have supported Kerberos authentication only in yarn cluster model in 1.1.x release

 

发件人: Stephan Ewen [mailto:sewen@apache.org]
发送时间: 201714 17:23
收件人: user@flink.apache.org
主题: Re: Does Flink cluster security works in Flink 1.1.4 release?

 

Hi!

 

Flink 1.1.x supports Kerberos for Hadoop (HDFS, YARN, HBase) via Hadoop's ticket system. It should work via kinit, in the same way when submitting a secure MapReduce job.

 

Kerberos for ZooKeeper, Kafka, etc, is only part of the 1.2 release.

 

Greetings,

Stephan

 

 

On Wed, Jan 4, 2017 at 7:25 AM, Zhangrucong <zhangrucong@huawei.com> wrote:

Hi:

     Now I use Flink 1.1.4 release in standalone cluster model. I want to do the Kerberos authentication between Flink CLI and the Jobmanager. But in the flink-conf.yaml, there is no Flink cluster security configuration.

Does the Kerberos authentication works in Flink 1.1.4 release?

Thanks in advance!