[32013] in Kerberos

home help back first fref pref prev next nref lref last post

programatic translation of authentication names to local names

daemon@ATHENA.MIT.EDU (Owen O'Malley)
Wed Feb 3 21:41:16 2010

Message-Id: <1008729D-0F33-4BD5-ADD4-BBB7160B9EBD@apache.org>
From: "Owen O'Malley" <omalley@apache.org>
To: kerberos@mit.edu
Mime-Version: 1.0 (Apple Message framework v936)
Date: Wed, 3 Feb 2010 18:40:37 -0800
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

We're adding Kerberos security to Apache Hadoop (hadoop.apache.org),  
which is an open source petabyte-scale distributed file system and  
MapReduce implementation.  Since MapReduce includes running  
distributed jobs, we need to map the authenticated names to local OS  
names. Within Kerberos this seems to be done by  
krb5_aname_to_localname. Unfortunately, that method doesn't seem to be  
exported via a public API or a CLI tool. Since Hadoop is in Java, the  
easiest thing to do is re-implement the method, but that seems  
unfortunate. Can anyone suggest a better path?

Thanks,
    Owen
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post