[ https://issues.apache.org/jira/browse/SPARK-12646?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15091404#comment-15091404 ]
Marcelo Vanzin commented on SPARK-12646: ---------------------------------------- That sounds really weird. Why are you launching Spark jobs with YARN's credentials, instead of your own users? That sounds like a bad idea. > Support _HOST in kerberos principal for connecting to secure cluster > -------------------------------------------------------------------- > > Key: SPARK-12646 > URL: https://issues.apache.org/jira/browse/SPARK-12646 > Project: Spark > Issue Type: Improvement > Components: YARN > Reporter: Hari Krishna Dara > Priority: Minor > Labels: security > > Hadoop supports _HOST as a token that is dynamically replaced with the actual > hostname at the time the kerberos authentication is done. This is supported > in many hadoop stacks including YARN. When configuring Spark to connect to > secure cluster (e.g., yarn-cluster or yarn-client as master), it would be > natural to extend support for this token to Spark as well. -- This message was sent by Atlassian JIRA (v6.3.4#6332) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org For additional commands, e-mail: issues-h...@spark.apache.org