Re: How can we access multiple Kerberos-enabled Hadoop with different users in single JVM process

2019-12-23 Thread tobe
Thanks @Vinod and proxy-users was considered. But what we want to support is accessing multiple secured Hadoop. If we want to initialize the Kerberos credentials, we need config the file of /etc/krb5.conf. If we want to access two different Kerberos services(specified KDC), we can not run JVM

Re: How can we access multiple Kerberos-enabled Hadoop with different users in single JVM process

2019-12-23 Thread Vinod Kumar Vavilapalli
You are looking for the proxy-users pattern. See here: https://hadoop.apache.org/docs/stable/hadoop-project-dist/hadoop-common/Superusers.html Thanks +Vinod > On Dec 24, 2019, at 9:49 AM, tobe wrote: > > Currently Hadoop relies on Kerberos to do authentication and authorization. > For single

How can we access multiple Kerberos-enabled Hadoop with different users in single JVM process

2019-12-23 Thread tobe
Currently Hadoop relies on Kerberos to do authentication and authorization. For single user, we can initialize clients with keytab files in command-line or Java program. But sometimes we need to access Hadoop as multiple users. For example, we build the web service to view users' HDFS files. We