[
https://issues.apache.org/jira/browse/FLINK-3929?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15386896#comment-15386896
]
ASF GitHub Bot commented on FLINK-3929:
---------------------------------------
GitHub user vijikarthi opened a pull request:
https://github.com/apache/flink/pull/2275
FLINK-3929 Support for Kerberos Authentication with Keytab Credential
This PR addresses FLINK-3929 requirements:
1) Added Keytab support to Flink (Standalone and Yarn mode deployment)
2) Unified JAAS configuration support to services (Kafka/ZK)
3) Added MiniKDC support to run integration test case for FS/Kafka
connectors and Yarn
4) Added documentation that explains how the security model works
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/vijikarthi/flink FLINK-3929
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/flink/pull/2275.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #2275
----
commit 824d16696bd05d5b2aa2920813dacfda736c7372
Author: Vijay Srinivasaraghavan <[email protected]>
Date: 2016-07-21T00:08:33Z
FLINK-3929 Support for Kerberos Authentication with Keytab Credential
----
> Support for Kerberos Authentication with Keytab Credential
> ----------------------------------------------------------
>
> Key: FLINK-3929
> URL: https://issues.apache.org/jira/browse/FLINK-3929
> Project: Flink
> Issue Type: New Feature
> Reporter: Eron Wright
> Assignee: Vijay Srinivasaraghavan
> Labels: kerberos, security
> Original Estimate: 672h
> Remaining Estimate: 672h
>
> _This issue is part of a series of improvements detailed in the [Secure Data
> Access|https://docs.google.com/document/d/1-GQB6uVOyoaXGwtqwqLV8BHDxWiMO2WnVzBoJ8oPaAs/edit?usp=sharing]
> design doc._
> Add support for a keytab credential to be associated with the Flink cluster,
> to facilitate:
> - Kerberos-authenticated data access for connectors
> - Kerberos-authenticated ZooKeeper access
> Support both the standalone and YARN deployment modes.
>
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
