Created on 04-29-2014 03:29 PM - edited 04-29-2014 06:18 PM
We have a CDH5 environment with kerberos enabled. I am trying to connect from a remote machine using the HDFS API (I have this working against CDH5 without kerberos). Is there a clear example of how to do this? I am assuming this can be done?
Created 04-30-2014 08:16 PM
I belive that Harsh answered this question on StackOverflow recently: http://stackoverflow.com/questions/21193453/how-to-access-secure-kerberized-hadoop-using-just-java-a... Let me know if Harsh's solution works for you, or if you need further detail.
Created 05-01-2014 09:24 PM
Thank you, I will give that a try and let you know how I make out.
Created 05-05-2014 06:42 PM
I had some time to look at this today but I still have some questions. What is the UserGroupInformation superuser? Is the keytab file for this user the only thing I need on the client side (configuration settings from site.xml, hdfs-site.xml etc or jaas.conf krb5.ini)?
I have seen some code snippet that users SecurityUtil.login(configuration, keytabKeyName, userKeyName) and I am able to login with my keytab file and username but when I try to do anything with the filesystem I encounter security exceptions.