Skip to content
This repository has been archived by the owner on Jan 8, 2019. It is now read-only.

Hannibal doesn't support Kerberos #182

Closed
amithkanand opened this issue Jun 22, 2015 · 1 comment
Closed

Hannibal doesn't support Kerberos #182

amithkanand opened this issue Jun 22, 2015 · 1 comment

Comments

@amithkanand
Copy link
Contributor

Current implementation of Hannibal only works with non kerberized cluster. In a kerberized environment Hannibal service can't talk to secure Hbase. A thought to fix this is:

  • Create a hannibal user during installation.
  • A keytab for this new user will be required
  • Logic to renew tickets for Hannibal will have to be developed
@cbaenziger
Copy link
Member

Some issues it would appear with Hannibal are needing to update the Play WebService API calls[1,2,3] to do SPNEGO authentication.

Perhaps, we can set the Hannibal configuration file to accept a keytab and have Hannibal orchestrate the ticket renewals or if we run Hannibal as the HBase user instead of nobody, we may leverage the HBase tickets already present on the machine for now.

Lastly, in sentric/hannibal#19 there is discussion of Hannibal possibly working on a kerberized cluster as well. Perhaps there are some lessons we can take from there.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

3 participants