Hadoop Authentication

Last modified : 25 September, 2017

How does a Hadoop Server know your identity? I owe a lot of this understanding to Heesoo Kim. Here are my notes from Hadoop-2.7.4 :

FilterInitializer

AuthenticationFilter

AuthenticationHandler

2017-07-24 20:22:49,826 WARN org.apache.hadoop.security.authentication.server.AuthenticationFilter: AuthenticationToken ignored: Invalid AuthenticationToken type

Lets look at some of the implementations of AuthenticationHandler:

KerberosAuthenticationHandler
AltKerberosAuthenticationHandler
DelegationTokenAuthenticationHandler
PseudoAuthenticationHandler

Allen pointed out that HADOOP-12082 added a new (and possibly better) way to configure authentication in Hadoop-2.8.0 which earlier required the AltKerberosAuthenticationHandler, but I haven’t gotten around to using it. The contributors of this feature wrote this article explaining it.

All content on this website is licensed as Creative Commons-Attribution-ShareAlike 4.0 License. Opinions expressed are solely my own.