From issues-return-191670-archive-asf-public=cust-asf.ponee.io@spark.apache.org Mon May 14 20:11:05 2018 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id BC8CE180627 for ; Mon, 14 May 2018 20:11:04 +0200 (CEST) Received: (qmail 38544 invoked by uid 500); 14 May 2018 18:11:03 -0000 Mailing-List: contact issues-help@spark.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list issues@spark.apache.org Received: (qmail 38530 invoked by uid 99); 14 May 2018 18:11:03 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 14 May 2018 18:11:02 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id 981181A03C0 for ; Mon, 14 May 2018 18:11:02 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -101.511 X-Spam-Level: X-Spam-Status: No, score=-101.511 tagged_above=-999 required=6.31 tests=[KAM_ASCII_DIVIDERS=0.8, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_WHITELIST=-100] autolearn=disabled Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id hsmxqoCKJl6M for ; Mon, 14 May 2018 18:11:01 +0000 (UTC) Received: from mailrelay1-us-west.apache.org (mailrelay1-us-west.apache.org [209.188.14.139]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTP id 1CC745F369 for ; Mon, 14 May 2018 18:11:01 +0000 (UTC) Received: from jira-lw-us.apache.org (unknown [207.244.88.139]) by mailrelay1-us-west.apache.org (ASF Mail Server at mailrelay1-us-west.apache.org) with ESMTP id 5E4B5E0DF9 for ; Mon, 14 May 2018 18:11:00 +0000 (UTC) Received: from jira-lw-us.apache.org (localhost [127.0.0.1]) by jira-lw-us.apache.org (ASF Mail Server at jira-lw-us.apache.org) with ESMTP id 17D1A217A3 for ; Mon, 14 May 2018 18:11:00 +0000 (UTC) Date: Mon, 14 May 2018 18:11:00 +0000 (UTC) From: "Ankita (JIRA)" To: issues@spark.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (SPARK-24270) How to submit spark jobs with kinit sessions without keytab onto a Kerberized cluster managed by Cloudera MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/SPARK-24270?page=3Dcom.atlassia= n.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=3D164= 74564#comment-16474564 ]=20 Ankita commented on SPARK-24270: -------------------------------- thanks! > How to submit spark jobs with kinit sessions without keytab onto a Kerber= ized cluster managed by Cloudera=20 > -------------------------------------------------------------------------= --------------------------------- > > Key: SPARK-24270 > URL: https://issues.apache.org/jira/browse/SPARK-24270 > Project: Spark > Issue Type: Question > Components: Documentation > Affects Versions: 2.2.1 > Reporter: Ankita > Priority: Major > > Hi, > We have a cluster that is secured over Kerberos on Cloudera. However, Spa= rk is not managed by cloudera. We have our own distribution package with pa= ckages and deploys Spark 2.21 onto the cluster.=C2=A0 The reason being, the= version of Cloudera is 5.4 which does not support the Spark 2+ > I see that we are able to submit jobs on the cluster with a valid keytab = file and principal account, but unable to just do kinit and use the ticket = generated in the session to authenticate the job.=C2=A0 > Is there a way to not use the keytab/prinicipal to be passed explicitly a= nd just use the kinit session of the user submitting the job?=C2=A0 > Why is it essential to have a specific keytab file and pass it as args to= spark submit / spark shell?=C2=A0 > Please provide some context around how Spark authenticates using this dat= a and why cant it use Kinit in this case?=C2=A0 -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org For additional commands, e-mail: issues-help@spark.apache.org