HDFS-4546. Use DFSUtil.getSpnegoKeytabKey() to get the spnego keytab key in secondary namenode and namenode http server. Contributed by Arpit Agarwal.
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/trunk@1454021 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
parent
6d4ab86412
commit
301079b4bf
@ -371,6 +371,9 @@ Release 2.0.5-beta - UNRELEASED
|
|||||||
HDFS-4544. Error in deleting blocks should not do check disk, for
|
HDFS-4544. Error in deleting blocks should not do check disk, for
|
||||||
all types of errors. (Arpit Agarwal via suresh)
|
all types of errors. (Arpit Agarwal via suresh)
|
||||||
|
|
||||||
|
HDFS-4546. Use DFSUtil.getSpnegoKeytabKey() to get the spnego keytab key
|
||||||
|
in secondary namenode and namenode http server. (Arpit Agarwal via suresh)
|
||||||
|
|
||||||
Release 2.0.4-alpha - UNRELEASED
|
Release 2.0.4-alpha - UNRELEASED
|
||||||
|
|
||||||
INCOMPATIBLE CHANGES
|
INCOMPATIBLE CHANGES
|
||||||
|
@ -113,11 +113,8 @@ private Map<String, String> getAuthFilterParams(Configuration conf)
|
|||||||
DFSConfigKeys.DFS_WEB_AUTHENTICATION_KERBEROS_PRINCIPAL_KEY +
|
DFSConfigKeys.DFS_WEB_AUTHENTICATION_KERBEROS_PRINCIPAL_KEY +
|
||||||
"' is not set.");
|
"' is not set.");
|
||||||
}
|
}
|
||||||
String httpKeytab = conf.get(
|
String httpKeytab = conf.get(DFSUtil.getSpnegoKeytabKey(conf,
|
||||||
DFSConfigKeys.DFS_WEB_AUTHENTICATION_KERBEROS_KEYTAB_KEY);
|
DFSConfigKeys.DFS_NAMENODE_KEYTAB_FILE_KEY));
|
||||||
if (httpKeytab == null) {
|
|
||||||
httpKeytab = conf.get(DFSConfigKeys.DFS_NAMENODE_KEYTAB_FILE_KEY);
|
|
||||||
}
|
|
||||||
if (httpKeytab != null && !httpKeytab.isEmpty()) {
|
if (httpKeytab != null && !httpKeytab.isEmpty()) {
|
||||||
params.put(
|
params.put(
|
||||||
DFSConfigKeys.DFS_WEB_AUTHENTICATION_KERBEROS_KEYTAB_KEY,
|
DFSConfigKeys.DFS_WEB_AUTHENTICATION_KERBEROS_KEYTAB_KEY,
|
||||||
|
@ -255,15 +255,11 @@ private void initialize(final Configuration conf,
|
|||||||
new AccessControlList(conf.get(DFS_ADMIN, " "))) {
|
new AccessControlList(conf.get(DFS_ADMIN, " "))) {
|
||||||
{
|
{
|
||||||
if (UserGroupInformation.isSecurityEnabled()) {
|
if (UserGroupInformation.isSecurityEnabled()) {
|
||||||
String httpKeytabKey = DFSConfigKeys.
|
|
||||||
DFS_WEB_AUTHENTICATION_KERBEROS_KEYTAB_KEY;
|
|
||||||
if (null == conf.get(httpKeytabKey)) {
|
|
||||||
httpKeytabKey = DFSConfigKeys.DFS_SECONDARY_NAMENODE_KEYTAB_FILE_KEY;
|
|
||||||
}
|
|
||||||
initSpnego(
|
initSpnego(
|
||||||
conf,
|
conf,
|
||||||
DFSConfigKeys.DFS_SECONDARY_NAMENODE_INTERNAL_SPNEGO_USER_NAME_KEY,
|
DFSConfigKeys.DFS_SECONDARY_NAMENODE_INTERNAL_SPNEGO_USER_NAME_KEY,
|
||||||
httpKeytabKey);
|
DFSUtil.getSpnegoKeytabKey(conf,
|
||||||
|
DFSConfigKeys.DFS_SECONDARY_NAMENODE_KEYTAB_FILE_KEY));
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
};
|
};
|
||||||
|
Loading…
Reference in New Issue
Block a user