flink-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF GitHub Bot (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (FLINK-3929) Support for Kerberos Authentication with Keytab Credential
Date Wed, 27 Jul 2016 15:01:20 GMT

    [ https://issues.apache.org/jira/browse/FLINK-3929?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15395805#comment-15395805
] 

ASF GitHub Bot commented on FLINK-3929:
---------------------------------------

Github user mxm commented on a diff in the pull request:

    https://github.com/apache/flink/pull/2275#discussion_r72456165
  
    --- Diff: flink-yarn/src/main/java/org/apache/flink/yarn/YarnApplicationMasterRunner.java
---
    @@ -125,29 +124,35 @@ protected int run(String[] args) {
     		try {
     			LOG.debug("All environment variables: {}", ENV);
     
    -			final String yarnClientUsername = ENV.get(YarnConfigKeys.ENV_CLIENT_USERNAME);
    +			final String yarnClientUsername = ENV.get(YarnConfigKeys.ENV_HADOOP_USER_NAME);
     			require(yarnClientUsername != null, "YARN client user name environment variable {}
not set",
    -				YarnConfigKeys.ENV_CLIENT_USERNAME);
    +				YarnConfigKeys.ENV_HADOOP_USER_NAME);
     
    -			final UserGroupInformation currentUser;
    -			try {
    -				currentUser = UserGroupInformation.getCurrentUser();
    -			} catch (Throwable t) {
    -				throw new Exception("Cannot access UserGroupInformation information for current user",
t);
    -			}
    +			final String currDir = ENV.get(Environment.PWD.key());
    +			require(currDir != null, "Current working directory variable (%s) not set", Environment.PWD.key());
    +			LOG.debug("Current working Directory: {}", currDir);
     
    -			LOG.info("YARN daemon runs as user {}. Running Flink Application Master/JobManager
as user {}",
    --- End diff --
    
    Could we keep this log output which prints out the user?


> Support for Kerberos Authentication with Keytab Credential
> ----------------------------------------------------------
>
>                 Key: FLINK-3929
>                 URL: https://issues.apache.org/jira/browse/FLINK-3929
>             Project: Flink
>          Issue Type: New Feature
>            Reporter: Eron Wright 
>            Assignee: Vijay Srinivasaraghavan
>              Labels: kerberos, security
>   Original Estimate: 672h
>  Remaining Estimate: 672h
>
> _This issue is part of a series of improvements detailed in the [Secure Data Access|https://docs.google.com/document/d/1-GQB6uVOyoaXGwtqwqLV8BHDxWiMO2WnVzBoJ8oPaAs/edit?usp=sharing]
design doc._
> Add support for a keytab credential to be associated with the Flink cluster, to facilitate:
> - Kerberos-authenticated data access for connectors
> - Kerberos-authenticated ZooKeeper access
> Support both the standalone and YARN deployment modes.
>  



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message