Skip to content

Conversation

@wsjz
Copy link

@wsjz wsjz commented Jan 8, 2024

No description provided.

@wsjz wsjz force-pushed the for_hadoop-3.3.4.5-for-doris branch from ea05046 to 1843d54 Compare January 10, 2024 11:18
@morningman morningman merged commit a16b047 into apache:hadoop-3.3.4 Jan 12, 2024
morningman pushed a commit to apache/doris that referenced this pull request Jan 12, 2024
#29291)

1. we need  remove BE kinit, and use jni login with keytab, because kinit cannot renew TGT for doris in many complex cases.
> This pull requet will support new instance from keytab: apache/doris-thirdparty#173, so now we  won't need kinit cmd, just login with keytab and principal

2. add `kerberos_ccache_path` to set kerberos credentials cache path manually.

3. add `max_hdfs_file_handle_cache_time_ms` to set hdfs fs handle cache time.
seawinde pushed a commit to seawinde/doris that referenced this pull request Jan 15, 2024
apache#29291)

1. we need  remove BE kinit, and use jni login with keytab, because kinit cannot renew TGT for doris in many complex cases.
> This pull requet will support new instance from keytab: apache/doris-thirdparty#173, so now we  won't need kinit cmd, just login with keytab and principal

2. add `kerberos_ccache_path` to set kerberos credentials cache path manually.

3. add `max_hdfs_file_handle_cache_time_ms` to set hdfs fs handle cache time.
seawinde pushed a commit to seawinde/doris that referenced this pull request Jan 15, 2024
apache#29291)

1. we need  remove BE kinit, and use jni login with keytab, because kinit cannot renew TGT for doris in many complex cases.
> This pull requet will support new instance from keytab: apache/doris-thirdparty#173, so now we  won't need kinit cmd, just login with keytab and principal

2. add `kerberos_ccache_path` to set kerberos credentials cache path manually.

3. add `max_hdfs_file_handle_cache_time_ms` to set hdfs fs handle cache time.
yiguolei pushed a commit to apache/doris that referenced this pull request Jan 16, 2024
#29291)

1. we need  remove BE kinit, and use jni login with keytab, because kinit cannot renew TGT for doris in many complex cases.
> This pull requet will support new instance from keytab: apache/doris-thirdparty#173, so now we  won't need kinit cmd, just login with keytab and principal

2. add `kerberos_ccache_path` to set kerberos credentials cache path manually.

3. add `max_hdfs_file_handle_cache_time_ms` to set hdfs fs handle cache time.
morningman added a commit to morningman/doris-thirdparty that referenced this pull request Mar 6, 2025
morningman added a commit that referenced this pull request Mar 18, 2025
… but remain principal interface (#298)

Revert #173 but keep `hdfsBuilderSetPrincipal()` in hdfs.h.

We can not only use `hdfsBuilderSetUsername()` to set principal. If user is set, the `UserGroupInformation.getBestUGI()`
will try getting ugi from remote user, not from kerberos subject.
morningman added a commit that referenced this pull request Oct 20, 2025
… but remain principal interface (#298)

Revert #173 but keep `hdfsBuilderSetPrincipal()` in hdfs.h.

We can not only use `hdfsBuilderSetUsername()` to set principal. If user is set, the `UserGroupInformation.getBestUGI()`
will try getting ugi from remote user, not from kerberos subject.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants