Kai Zheng created HADOOP-9325:
---------------------------------

             Summary: KerberosAuthenticationHandler AuthenticationFilter and 
should be able to reference Hadoop configurations
                 Key: HADOOP-9325
                 URL: https://issues.apache.org/jira/browse/HADOOP-9325
             Project: Hadoop Common
          Issue Type: Improvement
          Components: security
            Reporter: Kai Zheng


In KerberosAuthenticationHandler SPNEGO activities, KerberosName is used to get 
short name for client principal, which needs in some Kerberos authentication 
situations to reference translation rules defined in Hadoop configuration file 
like core-site.xml
as follows:

  <property>
    <name>hadoop.security.auth_to_local</name>
    <value>...</value>
  </property>

Note, this is an issue only if default rule can't meet the requirement and 
custom rules need to be defined.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to