[ 
https://issues.apache.org/jira/browse/HADOOP-9446?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13735781#comment-13735781
 ] 

Luke Lu commented on HADOOP-9446:
---------------------------------

Which version of IBM JDK this is for? IBM JDK 6 SR14? Is the patch needed for 
IBM JDK 7?

You should still use PlatformName.IBM_JAVA instead of introducing a new one in 
KerberosUtil.
                
> Support Kerberos HTTP SPNEGO authentication for non-SUN JDK
> -----------------------------------------------------------
>
>                 Key: HADOOP-9446
>                 URL: https://issues.apache.org/jira/browse/HADOOP-9446
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 1.1.1, 2.0.2-alpha
>            Reporter: Yu Gao
>            Assignee: Yu Gao
>         Attachments: HADOOP-9446-branch-2.patch, HADOOP-9446.patch, 
> TestKerberosHttpSPNEGO.java, 
> TEST-org.apache.hadoop.security.authentication.client.TestKerberosAuthenticator.xml,
>  
> TEST-org.apache.hadoop.security.authentication.server.TestKerberosAuthenticationHandler.xml
>
>
> Class KerberosAuthenticator and KerberosAuthenticationHandler currently only 
> support running with SUN JDK when Kerberos is enabled. In order to support  
> alternative JDKs like IBM JDK which has different options supported by 
> Krb5LoginModule and different login module classes, the HTTP Kerberos 
> authentication classes need to be changed.
> In addition, NT_GSS_KRB5_PRINCIPAL, which is used in KerberosAuthenticator to 
> get the corresponding oid instance, is a field defined in SUN JDK, but not in 
> IBM JDK.
> This JIRA is to fix the existing problems and add support for Kerberos HTTP 
> SPNEGO authentication with non-SUN JDK.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to