Hi Guys, I just started developing a Accumulo Client with Kerberos and sasl. It was a hell to figure out that you need to call yourself UserGroupInformation.loginfromkeytab(principal,keytab) and then you can call KerberosToken(principal,keytab) this all because we deprecated the replaceuser from the ugi. Later on when we get the connector this breaks apart mainly because for example my keytab is has not the same user as the os account where I’m developing.
It would be nice to just login the user. What are the are you guys thinking about this ? Regards Jorge
