[
https://issues.apache.org/jira/browse/SPARK-12646?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15091395#comment-15091395
]
Hari Krishna Dara commented on SPARK-12646:
-------------------------------------------
Marcelo, I need this for the same reason that hadoop needs (which you already
mentioned). Basically, my Spark jobs could be triggered from any of the many
nodemanagers in the cluster and so if I have the Spark principal configured the
same way as for hadoop (with _HOST placeholder), then configuring it becomes
easier just like for hadoop. In my case, I am also sharing the same principal
between YARN and Spark, so it makes even more sense.
> Support _HOST in kerberos principal for connecting to secure cluster
> --------------------------------------------------------------------
>
> Key: SPARK-12646
> URL: https://issues.apache.org/jira/browse/SPARK-12646
> Project: Spark
> Issue Type: Improvement
> Components: YARN
> Reporter: Hari Krishna Dara
> Priority: Minor
> Labels: security
>
> Hadoop supports _HOST as a token that is dynamically replaced with the actual
> hostname at the time the kerberos authentication is done. This is supported
> in many hadoop stacks including YARN. When configuring Spark to connect to
> secure cluster (e.g., yarn-cluster or yarn-client as master), it would be
> natural to extend support for this token to Spark as well.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org
For additional commands, e-mail: issues-h...@spark.apache.org
