I created a mini-kerberos framework here in nifi-security-utils that does not depend on Hadoop:
https://github.com/apache/nifi/tree/master/nifi-commons/nifi-security-utils/src/main/java/org/apache/nifi/security/krb The first use-case was for the Solr processors and I believe this code is also now used in the DBCPConnectionPool. We could consider moving code there if it makes sense, but maybe see if you can achieve what you need to do with what is there already. I think that other Hadoop spnego stuff was added around the same time as part of a different effort, but likely a bit of overlap. On Tue, Apr 30, 2019 at 12:21 PM Peter Wicks (pwicks) <pwi...@micron.com> wrote: > > I was thinking of moving the non-Hadoop specific Kerberos classes out of > org.apache.nifi.hadoop into a more central location. There are some good > utility classes, such as KerberosKeytabCredentials, that it would be nice to > have centralized into a non-Hadoop specific library. > > Would it be appropriate to co-locate these with the > KerberosCredentialsService interface, or is there a better home in a > different location? > > Thanks, > Peter
