Return-Path: X-Original-To: apmail-hadoop-common-issues-archive@minotaur.apache.org Delivered-To: apmail-hadoop-common-issues-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id C391210002 for ; Mon, 18 Nov 2013 14:03:30 +0000 (UTC) Received: (qmail 41077 invoked by uid 500); 18 Nov 2013 14:03:30 -0000 Delivered-To: apmail-hadoop-common-issues-archive@hadoop.apache.org Received: (qmail 39324 invoked by uid 500); 18 Nov 2013 14:03:25 -0000 Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: common-issues@hadoop.apache.org Delivered-To: mailing list common-issues@hadoop.apache.org Received: (qmail 38942 invoked by uid 99); 18 Nov 2013 14:03:21 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 18 Nov 2013 14:03:21 +0000 Date: Mon, 18 Nov 2013 14:03:21 +0000 (UTC) From: "Joey Echeverria (JIRA)" To: common-issues@hadoop.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (HADOOP-10108) Add support for kerberos delegation to hadoop-auth MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HADOOP-10108?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Joey Echeverria updated HADOOP-10108: ------------------------------------- Status: Patch Available (was: Open) The patch got a +1 on my local run of dev-support/test-patch.sh, so I think it's ready for review. > Add support for kerberos delegation to hadoop-auth > -------------------------------------------------- > > Key: HADOOP-10108 > URL: https://issues.apache.org/jira/browse/HADOOP-10108 > Project: Hadoop Common > Issue Type: Improvement > Components: security > Affects Versions: 2.2.0, 3.0.0 > Reporter: Joey Echeverria > Assignee: Joey Echeverria > Attachments: HADOOP-10108-1.patch > > > Most services that need to perform Hadoop operations on behalf of an end-user make use of the built-in ability to configure trusted services and use Hadoop-specific delegation tokens. However, some web-applications need delegated access to both Hadoop and other kerberos-authenticated services. It'd be useful for these applications to user kerberos delegation when using hadoop-auth's SPNEGO libraries. -- This message was sent by Atlassian JIRA (v6.1#6144)