[ https://issues.apache.org/jira/browse/HADOOP-11628?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14567753#comment-14567753 ]
Vinod Kumar Vavilapalli commented on HADOOP-11628: -------------------------------------------------- [~daryn], we haven't officially started supporting JDK 8 yet (HADOOP-11090), that is why I moved this to 2.8.0. Any reason why this is in 2.7.1? Thinking out aloud, should we put this in 2.8.0 when we will have HADOOP-11090 with a config option on by default for older deployments? IAC, [~aw] / [~rajive], please respond to [~daryn]'s comment above. Let's get to some consensus here. Tx. > SPNEGO auth does not work with CNAMEs in JDK8 > --------------------------------------------- > > Key: HADOOP-11628 > URL: https://issues.apache.org/jira/browse/HADOOP-11628 > Project: Hadoop Common > Issue Type: Bug > Components: security > Affects Versions: 2.6.0 > Reporter: Daryn Sharp > Assignee: Daryn Sharp > Priority: Blocker > Labels: jdk8 > Attachments: HADOOP-11628.patch > > > Pre-JDK8, GSSName auto-canonicalized the hostname when constructing the > principal for SPNEGO. JDK8 no longer does this which breaks the use of > user-friendly CNAMEs for services. -- This message was sent by Atlassian JIRA (v6.3.4#6332)