[
https://issues.apache.org/jira/browse/HDFS-2386?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13160542#comment-13160542
]
Jakob Homan commented on HDFS-2386:
-----------------------------------
bq. At this point, I'm leaning towards ripping out the SSL code from the
namenode and running at least that portion unsecured.
Now that we have a SPNEGO filter, we no longer need to use Kerberized SSL. It
would be good to remove that entirely. It was added as a work-around to having
no suitable SPNEGO solution and is rather unique to Hadoop (although apparently
ActiveMQ took the code as well). This would save us from having to use the
host principal (and instead use the more standard http principal) and simplify
a lot of the config.
> with security enabled fsck calls lead to handshake_failure and hftp fails
> throwing the same exception in the logs
> -----------------------------------------------------------------------------------------------------------------
>
> Key: HDFS-2386
> URL: https://issues.apache.org/jira/browse/HDFS-2386
> Project: Hadoop HDFS
> Issue Type: Bug
> Affects Versions: 0.20.205.0
> Reporter: Arpit Gupta
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
