flink-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF GitHub Bot (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (FLINK-3929) Support for Kerberos Authentication with Keytab Credential
Date Tue, 23 Aug 2016 13:18:21 GMT

    [ https://issues.apache.org/jira/browse/FLINK-3929?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15432757#comment-15432757
] 

ASF GitHub Bot commented on FLINK-3929:
---------------------------------------

Github user mxm commented on the issue:

    https://github.com/apache/flink/pull/2275
  
    >The RollingFileSink error might be due to https://issues.apache.org/jira/browse/HDFS-9213.
The secure MiniDFS cluster requires privileged ports to be used and we need to enable the
java process to grant access if it is not running as root.
    
    If we have to use privileged ports then we won't be able to use our CI system. Are you
sure it can only run in privileged mode? Is it not possible to change the port binding to
port >= 1024?
    
    If you have previously ran `mvn install -DskipTests`, then you can use the following to
run the test:
    
    ```
    mvn test integration-test -Dtest="YARNSessionFIFOSecuredITCase" -Pinclude-yarn-tests -pl
flink-yarn-tests
    ```


> Support for Kerberos Authentication with Keytab Credential
> ----------------------------------------------------------
>
>                 Key: FLINK-3929
>                 URL: https://issues.apache.org/jira/browse/FLINK-3929
>             Project: Flink
>          Issue Type: New Feature
>            Reporter: Eron Wright 
>            Assignee: Vijay Srinivasaraghavan
>              Labels: kerberos, security
>   Original Estimate: 672h
>  Remaining Estimate: 672h
>
> _This issue is part of a series of improvements detailed in the [Secure Data Access|https://docs.google.com/document/d/1-GQB6uVOyoaXGwtqwqLV8BHDxWiMO2WnVzBoJ8oPaAs/edit?usp=sharing]
design doc._
> Add support for a keytab credential to be associated with the Flink cluster, to facilitate:
> - Kerberos-authenticated data access for connectors
> - Kerberos-authenticated ZooKeeper access
> Support both the standalone and YARN deployment modes.
>  



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message