steveloughran/kerberos_and_hadoop

Kerberos and Hadoop: The Madness beyond the Gate

kerberos_and_hadoop's Issues

confusing/incomplete sentence

Hi again Steve,
I find this sentence confusing:

Isolate the Hadoop cluster from the rest of your network infrastructure, apart from some "edge" nodes, so that only processes running in the cluster.

I assume there are some words missing, but that depends on what you wanted to say.

Regards,
Camypaj

UGI chapter ends with unfinished sentence

Here the variable userFS contains a client of the Hadoop Filesystem with the home directory and access rights of the user user. If the user identity had come in via an RPC call, they'd

They'd what? That is exactly the use case I am interested in! 😃 Thanks for the book, looks like a great resource.

duplicate chapter - hdfs bootstrap

Hi Steve,

thanks for this book, it's just what I needed :)
I'm working on a pull request, but this seems more like a "issue", since this block (HDFS Boostrap)
seems identical to the one a few paragraphs above:

1. NN reads in a keytab and initializes itself from there (i.e. no need to kinit; ticket
   renewal handed by UGI).
2. Generates a Secret

Delegation tokens in the NN are persisted to the edit log, the operations OP_GET_DELEGATION_TOKEN
OP_RENEW_DELEGATION_TOKEN and OP_CANCEL_DELEGATION_TOKEN covering the actions. This ensures
that on failover, the tokens are still valid

Also it seems to contain a typo in the title that I've just noticed.
"Boostrap" -> "Bootstrap".

Cheers,
Camypaj