[
https://issues.apache.org/jira/browse/KYLIN-1014?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14738016#comment-14738016
]
fengYu edited comment on KYLIN-1014 at 9/10/15 2:31 AM:
--------------------------------------------------------
[~Shaofengshi] [~sunyerui] After consult our hadoop administrator and I get
that our hadoop cluster has more strictly, we need kerberos not only when
access HDFS and submit mapreduce job, but also when check Application status(we
need kinit on my windows system and check it at firefox with more firefox
setting). I think we do this insecurity because we share hadoop cluster with
some other project, the authentication on web UI makes me can not check those
jobs which submitted by other user.
When we encounter this problem, I consult our hadoop administrator and get the
answer is that we need do http request with Kerberos/Spnego and we search in
google find this answer
:http://stackoverflow.com/questions/24633380/how-do-i-authenticate-with-spnego-kerberos-and-apaches-httpclient
What is more, one need download JCE(Java Cryptography Extension) from java
website and put files that decompression from the zip file to
${JAVA_HOME}/jre/lib/security/,.
was (Author: feng_xiao_yu):
[~Shaofengshi] [~sunyerui] After consult our hadoop administrator and I get
that our hadoop cluster has more strictly, we need kerberos not only when
access HDFS and submit mapreduce job, but also when check Application status(we
need kinit on my windows system and check it at firefox with more firefox
setting). I think we do this insecurity because we share hadoop cluster with
some other project, the authentication on web UI makes me can not check those
jobs which submitted by other user.
When we encounter this problem, I consult our hadoop administrator and get the
answer is that we need do http request with Kerberos/Spnego and we search in
google find this answer
:http://stackoverflow.com/questions/24633380/how-do-i-authenticate-with-spnego-kerberos-and-apaches-httpclient
What is more, one need download JCE(Java Cryptography Extension) from java
website and put files that decompression from the zip file to
${JAVA_HOME}/jre/lib/security/,.
> patch for supporting kerberos authentication while getting status from RM
> -------------------------------------------------------------------------
>
> Key: KYLIN-1014
> URL: https://issues.apache.org/jira/browse/KYLIN-1014
> Project: Kylin
> Issue Type: Improvement
> Components: Job Engine
> Affects Versions: v1.0, v0.7.2, v0.7.1
> Reporter: fengYu
> Assignee: Shaofeng SHI
> Attachments: 0001-kerberos.patch
>
>
> I have used kylin-0.7.2 build cube and do some query, and I am trying
> kylin-1.0 in another hadoop cluster. I get this problem below in kylin-0.7.2
> and kylin-1.0 :
> Our hadoop cluster deals with authentication with kerberos, However, We find
> after submit a mapreduce job(the second step in building cube), kylin will
> send a http request to RM server and get the job status at regular intervals,
> But we always get errors here because kylin do nothing about kerberos.
> Finally , we do some change on source code and make it support kerberos
> authentication . attachment is my patch file..
> I add a property named "kylin.job.status.with.kerberos" which means if we
> need do authentication with kerberos when getting status from RM, the default
> value is false.
> It will be highly appreciated if you have some good idea or some suggestion.
> Thanks...
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
