We have this working now. When running in local mode we invoke the following method loginKerb, before creating the SparkSession: import org.apache.hadoop.security.UserGroupInformation;
import javax.security.auth.callback.*;
import javax.security.auth.login.LoginContext;
import javax.security.auth.login.LoginException;
import java.io.IOException;
public class LoginKerb {
public static void loginKerb() throws LoginException, IOException {
LoginContext lc = kinit();
UserGroupInformation.loginUserFromSubject(lc.getSubject());
}
private static LoginContext kinit() throws LoginException {
LoginContext lc = new LoginContext(LoginKerb.class.getSimpleName(), callbacks -> {
for(Callback c : callbacks){
if(c instanceof NameCallback)
((NameCallback) c).setName(System.getProperty("kerberos.user"));
if(c instanceof PasswordCallback)
((PasswordCallback) c).setPassword(System.getProperty("kerberos.password").toCharArray());
}
});
lc.login();
return lc;
}
}
... View more
