Mailing-List: contact user-help@kudu.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@kudu.apache.org
MIME-Version: 1.0
In-Reply-To: <CA+hOsvAhQJJpw7CoqyH0eWYsaJZ-KTgFmBL+1XVsmha-vd4RDQ@mail.gmail.com>
References: <CALQ8dW52CfwRM+nouuJSZOkaRBEgtRov_vw26Q-+QyRwoM6Wcg@mail.gmail.com>
 <CADY20s5zQvdZb8WOctkaQfn1wn7f3_VP8q6VZrHYV+O+rd-Nfg@mail.gmail.com>
 <CALQ8dW6XtPNs0Ms0N+TCJWCLp+Xi2_q2KhpsfRL=1dFE3Sm9Nw@mail.gmail.com>
 <CADY20s4kQDaYfHd4s23mCeBrM9VFuZUDOQzPy9uD3HX3Wg5UbQ@mail.gmail.com> <CA+hOsvAhQJJpw7CoqyH0eWYsaJZ-KTgFmBL+1XVsmha-vd4RDQ@mail.gmail.com>
From: Todd Lipcon <todd@cloudera.com>
Date: Tue, 24 Oct 2017 12:41:28 -0700
Message-ID: <CADY20s4RTF2y9jeg36ZX=K4Pn9+t7cMwbyymZc0xZ-z1460Syg@mail.gmail.com>
Subject: Re: kudu 1.4 kerberos
To: user@kudu.apache.org
Content-Type: multipart/alternative; boundary="089e08250af84bb1e2055c50216b"
archived-at: Tue, 24 Oct 2017 19:41:56 -0000

--089e08250af84bb1e2055c50216b
Content-Type: text/plain; charset="UTF-8"

I've filed https://issues.apache.org/jira/browse/KUDU-2198 to provide a
workaround for systems like this. I should have a patch up shortly since
it's relatively simple.

-Todd

On Tue, Oct 17, 2017 at 7:00 PM, Brock Noland <brock@phdata.io> wrote:

> Just one clarification below...
>
> > On Mon, Oct 16, 2017 at 2:29 PM, Matteo Durighetto <
> m.durighetto@miriade.it> wrote:
> > the "abcdefgh1234" it's an example of the the string created by the
> cloudera manager during the enable kerberos.
>
> ...
>
> On Mon, Oct 16, 2017 at 11:57 PM, Todd Lipcon <todd@cloudera.com> wrote:
> > Interesting. What is the sAMAccountName in this case? Wouldn't all of
> the 'kudu' have the same account name?
>
> CM generates some random names for cn and sAMAccountName. Below is an
> example created by CM.
>
> dn: CN=uQAtUOSwrA,OU=valhalla-kerberos,OU=Hadoop,DC=phdata,DC=io
> cn: uQAtUOSwrA
> sAMAccountName: uQAtUOSwrA
> userPrincipalName: kudu/worker5.valhalla.phdata.io@PHDATA.IO
> servicePrincipalName: kudu/worker5.valhalla.phdata.io
>


-- 
Todd Lipcon
Software Engineer, Cloudera

--089e08250af84bb1e2055c50216b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">I&#39;ve filed=C2=A0<a href=3D"https://issues.apache.org/j=
ira/browse/KUDU-2198">https://issues.apache.org/jira/browse/KUDU-2198</a> t=
o provide a workaround for systems like this. I should have a patch up shor=
tly since it&#39;s relatively simple.<div><br></div><div>-Todd</div></div><=
div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Tue, Oct 17, 20=
17 at 7:00 PM, Brock Noland <span dir=3D"ltr">&lt;<a href=3D"mailto:brock@p=
hdata.io" target=3D"_blank">brock@phdata.io</a>&gt;</span> wrote:<br><block=
quote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc=
 solid;padding-left:1ex">Just one clarification below...<br>
<span class=3D""><br>
&gt; On Mon, Oct 16, 2017 at 2:29 PM, Matteo Durighetto &lt;<a href=3D"mail=
to:m.durighetto@miriade.it">m.durighetto@miriade.it</a>&gt; wrote:<br>
</span><span class=3D"">&gt; the &quot;abcdefgh1234&quot; it&#39;s an examp=
le of the the string created by the cloudera manager during the enable kerb=
eros.<br>
<br>
</span>...<br>
<span class=3D""><br>
On Mon, Oct 16, 2017 at 11:57 PM, Todd Lipcon &lt;<a href=3D"mailto:todd@cl=
oudera.com">todd@cloudera.com</a>&gt; wrote:<br>
&gt; Interesting. What is the sAMAccountName in this case? Wouldn&#39;t all=
 of the &#39;kudu&#39; have the same account name?<br>
<br>
</span>CM generates some random names for cn and sAMAccountName. Below is a=
n<br>
example created by CM.<br>
<br>
dn: CN=3DuQAtUOSwrA,OU=3Dvalhalla-<wbr>kerberos,OU=3DHadoop,DC=3Dphdata,<wb=
r>DC=3Dio<br>
cn: uQAtUOSwrA<br>
sAMAccountName: uQAtUOSwrA<br>
userPrincipalName: kudu/<a href=3D"mailto:worker5.valhalla.phdata.io@PHDATA=
.IO">worker5.valhalla.phdata.<wbr>io@PHDATA.IO</a><br>
servicePrincipalName: kudu/<a href=3D"http://worker5.valhalla.phdata.io" re=
l=3D"noreferrer" target=3D"_blank">worker5.valhalla.phdata.<wbr>io</a><br>
</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><div class=
=3D"gmail_signature" data-smartmail=3D"gmail_signature">Todd Lipcon<br>Soft=
ware Engineer, Cloudera</div>
</div>

--089e08250af84bb1e2055c50216b--