Josh Elser created ACCUMULO-3706:
------------------------------------
Summary: Support SASL/Kerberos based authentication for replication
Key: ACCUMULO-3706
URL: https://issues.apache.org/jira/browse/ACCUMULO-3706
Project: Accumulo
Issue Type: Bug
Components: replication
Reporter: Josh Elser
Assignee: Josh Elser
Fix For: 1.7.0
Right now, a password is baked into the replication configuration (like
everything else). Need to support a keytab too.
To make it work across clusters, need to support authentication as someone
other than the system user (likely a principal without an instance).
I think we'd need to use this principal and wrap the actual replication work in
a {{doAs}} to prevent bashing the server's credentials its using for client
requests.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)