Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Date: Wed, 19 Apr 2017 18:33:41 +0000 (UTC)
From: "Andrew Wang (JIRA)" <jira@apache.org>
To: common-issues@hadoop.apache.org
Message-ID: <JIRA.12948684.1457592698000.321392.1492626821592@Atlassian.JIRA>
In-Reply-To: <JIRA.12948684.1457592698000@Atlassian.JIRA>
References: <JIRA.12948684.1457592698000@Atlassian.JIRA> <JIRA.12948684.1457592698157@jira-lw-us.apache.org>
Subject: [jira] [Commented] (HADOOP-12911) Upgrade Hadoop MiniKDC with Kerby
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
archived-at: Wed, 19 Apr 2017 18:33:45 -0000


    [ https://issues.apache.org/jira/browse/HADOOP-12911?page=3Dcom.atlassi=
an.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=3D15=
975252#comment-15975252 ]=20

Andrew Wang commented on HADOOP-12911:
--------------------------------------

I happened to come across this JIRA again. Did we finish swapping Apache DS=
 for Kerby? I still see references to Apache DS in the hadoop-auth pom.xml.

I can help by testing compilation of downstream apps with proposed patches.

> Upgrade Hadoop MiniKDC with Kerby
> ---------------------------------
>
>                 Key: HADOOP-12911
>                 URL: https://issues.apache.org/jira/browse/HADOOP-12911
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: test
>            Reporter: Jiajia Li
>            Assignee: Jiajia Li
>             Fix For: 3.0.0-alpha1
>
>         Attachments: HADOOP-12911-v1.patch, HADOOP-12911-v2.patch, HADOOP=
-12911-v3.patch, HADOOP-12911-v4.patch, HADOOP-12911-v5.patch, HADOOP-12911=
-v6.patch, HADOOP-12911-v7.patch, HaDOOP-12911-v8.patch
>
>
> As discussed in the mailing list, we=E2=80=99d like to introduce Apache K=
erby into Hadoop. Initially it=E2=80=99s good to start with upgrading Hadoo=
p MiniKDC with Kerby offerings. Apache Kerby (https://github.com/apache/dir=
ectory-kerby), as an Apache Directory sub project, is a Java Kerberos bindi=
ng. It provides a SimpleKDC server that borrowed ideas from MiniKDC and imp=
lemented all the facilities existing in MiniKDC. Currently MiniKDC depends =
on the old Kerberos implementation in Directory Server project, but the imp=
lementation is stopped being maintained. Directory community has a plan to =
replace the implementation using Kerby. MiniKDC can use Kerby SimpleKDC dir=
ectly to avoid depending on the full of Directory project. Kerby also provi=
des nice identity backends such as the lightweight memory based one and the=
 very simple json one for easy development and test environments.


--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org