[ https://issues.apache.org/jira/browse/SPARK-16742?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15867916#comment-15867916
]
Abel Rincón commented on SPARK-16742:
-------------------------------------
Hi all, we recent push our new implementation, and you can take a look over the code at the
PR.
I'm creating a little doc to explain the solution.
BTW Some headlines.
Enable using standard principal and keytab args, also allow to use proxy user over the real
principal with --proxy-user arg.
Diver side uses kerberos authentication
DAGScheduler get the hadoop delegation tokens related, using kerberos authentication and create
each task with those tokens.
Executors side uses hadoop tickets authentication
> Kerberos support for Spark on Mesos
> -----------------------------------
>
> Key: SPARK-16742
> URL: https://issues.apache.org/jira/browse/SPARK-16742
> Project: Spark
> Issue Type: New Feature
> Components: Mesos
> Reporter: Michael Gummelt
>
> We at Mesosphere have written Kerberos support for Spark on Mesos. We'll be contributing
it to Apache Spark soon.
> Mesosphere design doc: https://docs.google.com/document/d/1xyzICg7SIaugCEcB4w1vBWp24UDkyJ1Pyt2jtnREFqc/edit#heading=h.tdnq7wilqrj6
> Mesosphere code: https://github.com/mesosphere/spark/commit/73ba2ab8d97510d5475ef9a48c673ce34f7173fa
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org
|