Uploaded image for project: 'Kudu'
  1. Kudu
  2. KUDU-2103

Java client doesn't work on a Kerberized cluster with DNS aliases for masters

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 1.3.0, 1.4.0
    • 1.3.2, 1.5.0, 1.4.1
    • java, security
    • None

    Description

      The Java client doesn't canonicalize the master_addresses when requesting service tickets. This means that when the Java client is using DNS aliases for the master hosts in a Kerberized environment, it fails to connect to the masters as the Kerberos AS can't find the service tickets.

      As discussed in KUDU-2096, it should return the lower-case version of the canonical hostname for this to work properly.

      Attachments

        Issue Links

          is related to

          Task - A task that needs to be done. KUDU-2096 Document necessary configuration for Kerberos with master CNAMEs

          • Major - Major loss of function.
          • Open

          Activity

            People

              abukor Attila Bukor
              abukor Attila Bukor
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: