[
https://issues.apache.org/jira/browse/HADOOP-12911?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15241130#comment-15241130
]
Kai Zheng commented on HADOOP-12911:
------------------------------------
Thanks [~ste...@apache.org].
bq. I could never get it to issue tickets for >1 person in the same JVM (though
that was probably UGI's static initializers there).
It's a good idea to support tickets > 1, I believe Kerby SimpleKDC can do so
and the new MiniKDC will do. It would be good to add tests to verify this.
[~jiajia], how would you think of this?
In your previous experience, I guess you're right it's because of UGI. So it's
good not to couple this with UGI (so inherent the bad), as it is and will be.
bq. This is the evolution of classic MiniKDC: it will have to move on, what
needs to be done is do it carefully and with users of the module happy.
I agree. Based on the survey, let's see how to make all the clients happy. On
the other hand, people already suffered with the current, I do wish the
evolving will make their future life easier. [~jiajia], IIRC, there were some
issues related to MiniKDC in the current codebase, maybe you would check them
out and see how this new implementation will solve them or not? Thanks.
> Upgrade Hadoop MiniKDC with Kerby
> ---------------------------------
>
> Key: HADOOP-12911
> URL: https://issues.apache.org/jira/browse/HADOOP-12911
> Project: Hadoop Common
> Issue Type: Improvement
> Components: test
> Reporter: Jiajia Li
> Assignee: Jiajia Li
> Attachments: HADOOP-12911-v1.patch, HADOOP-12911-v2.patch,
> HADOOP-12911-v3.patch, HADOOP-12911-v4.patch, HADOOP-12911-v5.patch,
> HADOOP-12911-v6.patch
>
>
> As discussed in the mailing list, we’d like to introduce Apache Kerby into
> Hadoop. Initially it’s good to start with upgrading Hadoop MiniKDC with Kerby
> offerings. Apache Kerby (https://github.com/apache/directory-kerby), as an
> Apache Directory sub project, is a Java Kerberos binding. It provides a
> SimpleKDC server that borrowed ideas from MiniKDC and implemented all the
> facilities existing in MiniKDC. Currently MiniKDC depends on the old Kerberos
> implementation in Directory Server project, but the implementation is stopped
> being maintained. Directory community has a plan to replace the
> implementation using Kerby. MiniKDC can use Kerby SimpleKDC directly to avoid
> depending on the full of Directory project. Kerby also provides nice identity
> backends such as the lightweight memory based one and the very simple json
> one for easy development and test environments.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
