Kerberos principal as a user connecting to ZK about zoonavigator HOT 4 CLOSED

Hi!

There is a configuration option in ZooNavigator that allows you to use your JAAS config (or this one you're running Snap distribution). You could put keytab file path in that config file. Also, make sure that you correctly set context key to be used for that config file. Given everything is configured correctly, I think it should work as you expect.

If you run into some issues, you can also enable Kerberos debug mode to get verbose debug logs which could help further.

from zoonavigator.

Thx, I'll give it a try soon.

Do you thing that by putting the above JAAS config (that asks to pick up the principal from the ticket cache), it would be able to load it ? I'm running ZooNavigator using Docker which would mean that anything to be loaded (like the keytab) would have to be passed to the container... or ?

By Context Key, do you actually mean 'Client' ?

from zoonavigator.

Yes, you would have to pass the files to the container so they are on the same path as defined in the JAAS config file. If everything is set up correctly, I believe it should work.

Context key should be set depending on the JAAS config file you use. For example, for the config file you mentioned earlier, it would be HbaseClient.

from zoonavigator.

You can have a look at some examples in ZooKeeper docs if you scroll down to Client configuration section. I used something very similar when I was testing SASL auth in ZooNavigator and it worked fine.

from zoonavigator.