[
https://issues.apache.org/jira/browse/HADOOP-12847?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Wei-Chiu Chuang updated HADOOP-12847:
-------------------------------------
Attachment: HADOOP-12847.002.patch
Rev02: this revision adds an option to select HTTP or HTTPS and test cases.
* I basically rewrote the client side to make it more complete. The client side
SSL config (keystore/truststore) comes from Hadoop configuration files.
* Rewrote the test cases to validate client command options, and run tests
using both HTTP and HTTPS.
* Updated docs to reflect the additional command line parameter.
* server side is unchanged.
I did not add tests for SPENGO authentication and this code does not
automatically reads Kerberos keytab to login, as it's way too complex and
beyond my current understanding of Hadoop. The user of this code has to run
{{kinit}} before running this command.
> hadoop daemonlog should support https and SPNEGO for Kerberized cluster
> -----------------------------------------------------------------------
>
> Key: HADOOP-12847
> URL: https://issues.apache.org/jira/browse/HADOOP-12847
> Project: Hadoop Common
> Issue Type: New Feature
> Reporter: Wei-Chiu Chuang
> Assignee: Wei-Chiu Chuang
> Attachments: HADOOP-12847.001.patch, HADOOP-12847.002.patch
>
>
> {{hadoop daemonlog}} is a simple, yet useful tool for debugging.
> However, it does not support https, nor does it support a Kerberized Hadoop
> cluster.
> Using {{AuthenticatedURL}}, it will be able to support SPNEGO negotiation
> with a Kerberized name node web ui. It will also fall back to simple
> authentication if the cluster is not Kerberized.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
