[
https://issues.apache.org/jira/browse/PHOENIX-4688?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16631953#comment-16631953
]
Josh Elser commented on PHOENIX-4688:
-------------------------------------
{quote}On Mac OS X standard kerberos environment is provided by Heimdal
depending on version of Mac OS X and the Heimdal utilities the krb5.conf file
needs a small modification.
{quote}
I forgot that this is shell'ing out to do the `kinit` when I wrote the
suggestion last night. My bad.
{quote}Also [~elserj] I have no idea how and why you got MIT to work on a Mac,
but we can try to run the test on Linux as well. We did float an idea of a
docker test before but there are quite a few moving parts.
{quote}
I'm not sure if should be reading this with incredulity :). {{brew install
krb5}}, and modification of PATH to put those first is all that needs to be
done. My point is that assuming that all users of OSX are using Heimdal is
wrong. However, I don't know of a way to differentiate between MIT and Heimdal
at a glance. That said...
{quote}Tests worked after adding standard KDC notation I even placed it before
the Heimdal one
{quote}
Any reason we have to generate two different krb5.conf at all? If we can
generate a single krb5.conf that works for Heimdal and MIT, we don't need to
have this indirection, right?
{quote}On the minus side it seem we once again lost the benefit of CALCITE-1922
and need to hack up requests-kerberos.
{quote}
And, to be clear, the alternative is to use python-gssapi instead of the hacked
requests-kerberos?
Trying to make sure I understand everything so I can merge this today and write
some documentation.
> Add kerberos authentication to python-phoenixdb
> -----------------------------------------------
>
> Key: PHOENIX-4688
> URL: https://issues.apache.org/jira/browse/PHOENIX-4688
> Project: Phoenix
> Issue Type: Improvement
> Reporter: Lev Bronshtein
> Priority: Minor
>
> In its current state python-phoenixdv does not support support kerberos
> authentication. Using a modern python http library such as requests or
> urllib it would be simple (if not trivial) to add this support.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
