RE: Multiple realms

2014-10-20 Thread Phatak, Bharath
Hi Ben, I have java client to connect to Kerberos enabled Hadoop. Client should be able to connect different realms at the same time. I am using following code to interact with Kerberos enabled Hadoop. UserGroupInformation.loginUserFromKeytab("hdfs/pivhdsne@new.com","/root/hdfsNew.

Re: What happened to PKCROSS?

2014-10-20 Thread Rick van Rein
Hello Nico, Are you still working on your neo-PKCROSS draft? I’d love to see it move forward! You may have seen draft-vanrein-dnstxt-krb1 pop up; it arranges that a client (or its KDC) can figure out under what realm to address for a given hostname. This is based on DNS TXT RR + DNSSEC. Thi