hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Loughran (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-12911) Upgrade Hadoop MiniKDC with Kerby
Date Wed, 13 Apr 2016 10:26:25 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-12911?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15239025#comment-15239025
] 

Steve Loughran commented on HADOOP-12911:
-----------------------------------------

Quick patch review

# KerberosSecurityTestcase should be retained/updated; tests shouldn't need to move off it
# does {{hadoop-auth/pom.xml}} need changing for this patch? 

Overally, I'm thinking this is significant enough it has to be a 3.0 change; not so much for
the minikdc itself but the whole migration off the existing code and changing dependencies.

> Upgrade Hadoop MiniKDC with Kerby
> ---------------------------------
>
>                 Key: HADOOP-12911
>                 URL: https://issues.apache.org/jira/browse/HADOOP-12911
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: test
>            Reporter: Jiajia Li
>            Assignee: Jiajia Li
>         Attachments: HADOOP-12911-v1.patch, HADOOP-12911-v2.patch, HADOOP-12911-v3.patch,
HADOOP-12911-v4.patch, HADOOP-12911-v5.patch, HADOOP-12911-v6.patch
>
>
> As discussed in the mailing list, we’d like to introduce Apache Kerby into Hadoop.
Initially it’s good to start with upgrading Hadoop MiniKDC with Kerby offerings. Apache
Kerby (https://github.com/apache/directory-kerby), as an Apache Directory sub project, is
a Java Kerberos binding. It provides a SimpleKDC server that borrowed ideas from MiniKDC and
implemented all the facilities existing in MiniKDC. Currently MiniKDC depends on the old Kerberos
implementation in Directory Server project, but the implementation is stopped being maintained.
Directory community has a plan to replace the implementation using Kerby. MiniKDC can use
Kerby SimpleKDC directly to avoid depending on the full of Directory project. Kerby also provides
nice identity backends such as the lightweight memory based one and the very simple json one
for easy development and test environments.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message