Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: common-issues@hadoop.apache.org
Date: Wed, 30 Mar 2016 02:23:25 +0000 (UTC)
From: "Jiajia Li (JIRA)" <jira@apache.org>
To: common-issues@hadoop.apache.org
Message-ID: <JIRA.12948684.1457592698000.83618.1459304605622@Atlassian.JIRA>
In-Reply-To: <JIRA.12948684.1457592698000@Atlassian.JIRA>
References: <JIRA.12948684.1457592698000@Atlassian.JIRA>
 <JIRA.12948684.1457592698157@arcas>
Subject: [jira] [Commented] (HADOOP-12911) Upgrade Hadoop MiniKDC with Kerby
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable


    [ https://issues.apache.org/jira/browse/HADOOP-12911?page=3Dcom.atlassi=
an.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=3D15=
217264#comment-15217264 ]=20

Jiajia Li commented on HADOOP-12911:
------------------------------------

Hi Steve, thanks for your review and comments.
1. It's a great idea to make MiniKDC the subclass of AbstractService.
2. I think the TCP is set as the defaut transport. line 179:
{code}
DEFAULT_CONFIG.setProperty(TRANSPORT, "TCP");
{code}
Did I get your point?
3.=20
{code}
System.setProperty(SUN_SECURITY_KRB5_DEBUG, conf.getProperty(DEBUG, "false"=
));
{code}
The same as the the original MiniKDC, but I agree you point to use the curr=
ent value as the default.
4,5,6. Yes, I will update the patch.
Thanks again.


> Upgrade Hadoop MiniKDC with Kerby
> ---------------------------------
>
>                 Key: HADOOP-12911
>                 URL: https://issues.apache.org/jira/browse/HADOOP-12911
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: test
>            Reporter: Jiajia Li
>            Assignee: Jiajia Li
>         Attachments: HADOOP-12911-v1.patch, HADOOP-12911-v2.patch, HADOOP=
-12911-v3.patch, HADOOP-12911-v4.patch
>
>
> As discussed in the mailing list, we=E2=80=99d like to introduce Apache K=
erby into Hadoop. Initially it=E2=80=99s good to start with upgrading Hadoo=
p MiniKDC with Kerby offerings. Apache Kerby (https://github.com/apache/dir=
ectory-kerby), as an Apache Directory sub project, is a Java Kerberos bindi=
ng. It provides a SimpleKDC server that borrowed ideas from MiniKDC and imp=
lemented all the facilities existing in MiniKDC. Currently MiniKDC depends =
on the old Kerberos implementation in Directory Server project, but the imp=
lementation is stopped being maintained. Directory community has a plan to =
replace the implementation using Kerby. MiniKDC can use Kerby SimpleKDC dir=
ectly to avoid depending on the full of Directory project. Kerby also provi=
des nice identity backends such as the lightweight memory based one and the=
 very simple json one for easy development and test environments.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)