Return-Path: 
 <common-dev-return-81014-apmail-hadoop-common-dev-archive=hadoop.apache.org@hadoop.apache.org>
X-Original-To: apmail-hadoop-common-dev-archive@www.apache.org
Delivered-To: apmail-hadoop-common-dev-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 7A0A3E1AA
	for <apmail-hadoop-common-dev-archive@www.apache.org>;
 Fri, 22 Feb 2013 11:14:18 +0000 (UTC)
Received: (qmail 36758 invoked by uid 500); 22 Feb 2013 11:14:15 -0000
Delivered-To: apmail-hadoop-common-dev-archive@hadoop.apache.org
Received: (qmail 35955 invoked by uid 500); 22 Feb 2013 11:14:14 -0000
Mailing-List: contact common-dev-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:common-dev-help@hadoop.apache.org>
List-Unsubscribe: <mailto:common-dev-unsubscribe@hadoop.apache.org>
List-Post: <mailto:common-dev@hadoop.apache.org>
List-Id: <common-dev.hadoop.apache.org>
Reply-To: common-dev@hadoop.apache.org
Delivered-To: mailing list common-dev@hadoop.apache.org
Received: (qmail 35897 invoked by uid 99); 22 Feb 2013 11:14:13 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 22 Feb 2013 11:14:13 +0000
Date: Fri, 22 Feb 2013 11:14:12 +0000 (UTC)
From: "Kai Zheng (JIRA)" <jira@apache.org>
To: common-dev@hadoop.apache.org
Message-ID: <JIRA.12633592.1361531565394.322903.1361531652967@arcas>
In-Reply-To: <JIRA.12633592.1361531565394@arcas>
References: <JIRA.12633592.1361531565394@arcas>
Subject: [jira] [Created] (HADOOP-9325) KerberosAuthenticationHandler
 AuthenticationFilter and should be able to reference Hadoop configurations
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394

Kai Zheng created HADOOP-9325:
---------------------------------

             Summary: KerberosAuthenticationHandler AuthenticationFilter and should be able to reference Hadoop configurations
                 Key: HADOOP-9325
                 URL: https://issues.apache.org/jira/browse/HADOOP-9325
             Project: Hadoop Common
          Issue Type: Improvement
          Components: security
            Reporter: Kai Zheng


In KerberosAuthenticationHandler SPNEGO activities, KerberosName is used to get short name for client principal, which needs in some Kerberos authentication situations to reference translation rules defined in Hadoop configuration file like core-site.xml
as follows:

  <property>
    <name>hadoop.security.auth_to_local</name>
    <value>...</value>
  </property>

Note, this is an issue only if default rule can't meet the requirement and custom rules need to be defined.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira