metron-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From justinleet <...@git.apache.org>
Subject [GitHub] incubator-metron issue #518: METRON-799: The MPack should function in a kerb...
Date Wed, 19 Apr 2017 13:06:46 GMT
Github user justinleet commented on the issue:

    https://github.com/apache/incubator-metron/pull/518
  
    Update on this:
    
    After a significant amount of pain involved in making this work, we need to have the client_jaas.conf
and the metron keytab distributed to the various supervisor nodes so that they can actually
be authenticated/authorized as the metron user.
    
    The best discovered solution to this is to have a client that essentially just sets them
up (so we can actually create things on the various supervisor servers).  It's not ideal,
but @dlyle65535 and I are testing that it works.
    
    To actually set this up, just install Metron clients on all Storm supervisor nodes prior
to Kerberization.  Docs will be updated once we confirm that this approach works.
    



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastructure@apache.org or file a JIRA ticket
with INFRA.
---

Mime
View raw message