Marco Gaido created SPARK-25732:
-----------------------------------

             Summary: Allow specifying a keytab/principal for proxy user for 
token renewal 
                 Key: SPARK-25732
                 URL: https://issues.apache.org/jira/browse/SPARK-25732
             Project: Spark
          Issue Type: Improvement
          Components: Deploy
    Affects Versions: 2.4.0
            Reporter: Marco Gaido


As of now, application submitted with proxy-user fail after 2 week due to the 
lack of token renewal. In order to enable it, we need the the keytab/principal 
of the impersonated user to be specified, in order to have them available for 
the token renewal.

This JIRA proposes to add two parameters {{--proxy-user-principal}} and 
{{--proxy-user-keytab}}, and the last letting a keytab being specified also in 
a distributed FS, so that applications can be submitted by servers (eg. Livy, 
Zeppelin) without needing all users' principals being on that machine.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org
For additional commands, e-mail: issues-h...@spark.apache.org

Reply via email to