Mesos do support running containers as specific users passed to it. Thanks for chiming in, what else does YARN do with Kerberos besides keytab file and user?
Tim On Fri, Jun 26, 2015 at 1:20 PM, Marcelo Vanzin <van...@cloudera.com> wrote: > On Fri, Jun 26, 2015 at 1:13 PM, Tim Chen <t...@mesosphere.io> wrote: > >> So correct me if I'm wrong, sounds like all you need is a principal user >> name and also a keytab file downloaded right? >> > > I'm not familiar with Mesos so don't know what kinds of features it has, > but at the very least it would need to start containers as the requesting > users (like YARN does when running with Kerberos enabled), to avoid users > being able to read each other's credentials. > > -- > Marcelo >
