[
https://issues.apache.org/jira/browse/SLIDER-1035?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15090321#comment-15090321
]
Kai Zheng commented on SLIDER-1035:
-----------------------------------
bq. The main thing about encryption keys is that if it is < 256 you are not
going to work.
I understand. What I meant is, instead of using some number like
{{2147483647}}, maybe 128, 256 and the like may make more sense to users. You
know sometime users face problems like "Illegal key size", in fact they just
need to enable AES 256 or similar things.
bq. The other stuff is going to need delving into the UGI depths, because
that's into the bits of the java kerberos API that's hidden from view.
Yeah. Fortunately, there is still a way, might be not bad to try this.
{code}
<dependency>
<groupId>org.apache.kerby</groupId>
<artifactId>kerby-util</artifactId>
<version>1.0.0-RC1</version>
</dependency>
{code}
> Kdiag enhancements
> ------------------
>
> Key: SLIDER-1035
> URL: https://issues.apache.org/jira/browse/SLIDER-1035
> Project: Slider
> Issue Type: Improvement
> Components: client, security
> Affects Versions: Slider 0.90.2
> Environment: Kerberos
> Reporter: Steve Loughran
> Assignee: Steve Loughran
> Fix For: Slider 0.91
>
>
> Proposed enhancements
> # make easier to run server-side. the sysprops to enable com.sun debugging
> should be cached and then restored —and only set if a -verbose flag is set.
> # check for Java Crypto Extensions having full key length; fail fast if not
> # list tokens
> # add option to check networking (hostname resolves)
> # look up KDCs and fail if none are reachable
> # maybe each {{title()}} call should force flush stderr, to try and keep JDK
> output in sync with stdout.
> # am to have option to display this and also fail fast
> # implement `--services` probes for : yarn, hdfs, registry, timeline. This
> can't go into any hadoop-common lib, a list of probes classes can be provided
> to execute as the provided UGI.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
