[ 
https://issues.apache.org/jira/browse/NIFI-1488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15192517#comment-15192517
 ] 

Alan Jackoway commented on NIFI-1488:
-------------------------------------

1) I believe users should be supplying core-site.xml to both Hadoop and HBase 
processes regardless of whether Kerberos is on or off, since pretty much any 
code using Configuration expects and will try to include it off the classpath 
without you knowing: 
https://github.com/apache/hadoop/blob/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/conf/Configuration.java#L677

2) You are most likely right that to use multiple HBase Services, we may need 
something like doAs.

3) It seems like we are over-validating the principal name, but the Hadoop 
processors don't validate it at all, setting a user up to accidentally try to 
authenticate as something like 'a...@hadoop.com ' with a space at the end and 
then be confused by why it failed. However, if we can't find a reliable source 
of what principals can contain, it may be better to pull that validation out 
and just let it fail when people use ones that don't work.

> Add Kerberos Support to HBase processors
> ----------------------------------------
>
>                 Key: NIFI-1488
>                 URL: https://issues.apache.org/jira/browse/NIFI-1488
>             Project: Apache NiFi
>          Issue Type: Improvement
>    Affects Versions: 0.4.0, 0.4.1
>            Reporter: Bryan Bende
>            Assignee: Ricky Saltzer
>             Fix For: 0.6.0
>
>         Attachments: 
> 0001-NIFI-1488-Adjusting-unused-imports-and-adding-licens.patch
>
>
> Our current HBase integration does not support communicating with a 
> Kerberized HBase install. We should support this just like we do for the HDFS 
> processors.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to