- Subscribe to RSS Feed
- Mark Question as New
- Mark Question as Read
- Float this Question for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
use of hadoop.security.token.service.use_ip=false with Isilon
Created on ‎06-12-2018 04:33 PM - edited ‎09-16-2022 06:20 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Previously it had always recommended adding the following to the core-site.xml to limit hostname and IP exposure when getting Kerberos delegation tokens: hadoop.security.token.service.use_ip=false when using Kerberos with HDP and Isilon.
But in recent deployments, this setting does not appear as critical as previously required if full forward and DNS is implemented correctly. (PTR's on all Isilon Pool IP's).
I'm looking for any field experience on this issue, is this setting still required or needed to avoid delegation token issues?
Created ‎06-02-2021 07:25 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Specify the following configurations in Cloudera Manager on the Clusters > Isilon Service > Configuration tab:
- In the Isilon Cluster-wide Advanced Configuration Snippet (Safety Valve) for core-site.xml property for the Isilon service, set the value use_ip property to FALSE.
hadoop.security.token.service.use_ip = false
For more info click here
