Ritakang0451 commented on issue #1690:
URL:
https://github.com/apache/incubator-linkis/issues/1690#issuecomment-1066118502
Solution:
The file system of Hadoop obtained in linkis is implemented through
hdfsutils class, so we put Kerberos in this class. Users can see the logic of
this class. The login modes supported now are as follows:
if(KERBEROS_ENABLE.getValue){
val path =newFile(KEYTAB_FILE.getValue ， userName +".keytab").getPath
val user =getKerberosUser(userName)
UserGroupInformation.setConfiguration(getConfiguration(userName))
UserGroupInformation.loginUserFromKeytabAndReturnUGI(user， path)
}else{
UserGroupInformation.createRemoteUser(userName)
}
wds.linkis.keytab.enable=true
wds.linkis.keytab.file=/appcom/keytab/ #keytabPlace a directory that stores
the of multiple usersusername.keytabDocuments
wds.linkis.keytab.host.enabled=false #Whether the client is authenticated
with the principal
wds.linkis.keytab.host=127.0.0.1#Principle authentication needs to bring the
client IP
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
