Backups via WebHDFS: Support for Kerberos authentication

Details

Detail name Value
Changelog Number 2105
Type New Feature
Status Resolved
Fix Versions EXASOL 6.0.0
Resolution Date 2017-03-16

Backups via WebHDFS: Support for Kerberos authentication
We will support Kerberos authentication for creating database backups via WebHDFS.

Therefore, a user will have to provide a delegation token to the options of the appropriate remote archive volume. This delegation token can be retrieved as follows:

kinit {principal}
curl -s --negotiate -u : http://myserver:50070/webhdfs/v1/?op=GETDELEGATIONTOKEN | grep -Po 'urlString":"\K[^"]*'

To provide this token to the remote archive volume, add the following to its field "Options":

delegation_token={token}

Please remember that the token validity will cease after a certain amount of time, depending from the Hadoop system configuration. Thus, it must be refreshed regularly.