[
https://issues.apache.org/jira/browse/SPARK-5493?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15805205#comment-15805205
]
Marcelo Vanzin commented on SPARK-5493:
---------------------------------------
> Since keytab will be owned by a "service" account, not by proxied users, and
> keytab file will have proper OS permissions, not sure I'm following how
> keytab would be exposed to those proxied users?
When you use the principal / keytab options in spark-submit, Spark uploads the
keytab to HDFS, under the user running the application (in this case, the proxy
user).
> Support proxy users under kerberos
> ----------------------------------
>
> Key: SPARK-5493
> URL: https://issues.apache.org/jira/browse/SPARK-5493
> Project: Spark
> Issue Type: Improvement
> Components: Spark Core
> Affects Versions: 1.2.0
> Reporter: Brock Noland
> Assignee: Marcelo Vanzin
> Fix For: 1.3.0
>
>
> When using kerberos, services may want to use spark-submit to submit jobs as
> a separate user. For example a service like hive might want to submit jobs as
> a client user.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org
For additional commands, e-mail: issues-h...@spark.apache.org
