programatic translation of authentication names to local names
Owen O'Malley
omalley at apache.org
Wed Feb 3 21:40:37 EST 2010
We're adding Kerberos security to Apache Hadoop (hadoop.apache.org),
which is an open source petabyte-scale distributed file system and
MapReduce implementation. Since MapReduce includes running
distributed jobs, we need to map the authenticated names to local OS
names. Within Kerberos this seems to be done by
krb5_aname_to_localname. Unfortunately, that method doesn't seem to be
exported via a public API or a CLI tool. Since Hadoop is in Java, the
easiest thing to do is re-implement the method, but that seems
unfortunate. Can anyone suggest a better path?
Thanks,
Owen
More information about the Kerberos
mailing list