dtutil
A utility to fetch and manage Hadoop delegation tokens inside credentials files.
It’s intended to replace the simpler command fetchdt. There are multiple subcommands, each with their own flags and options.
For every subcommand that writes out to a file, the -format
option specifies the internal format to use .
java
is the legacy format that matches fetchdt
.
The default is protobuf
.
For every subcommand that connects to service, convenience flags are provided to specify a Kerberos principal name and a keytab file to use for authentication.
The usage is as follows:
$ hadoop dtutil [-keytab keytab_file -principal principal_name ] subcommand [-format (java|protobuf)] [-alias alias ] [-renewer renewer ] filename…
print [-alias alias ] filename [ filename2 …] |
Prints out the fields in the tokens contained in filename (and filename2 …). If |
get URL [-service scheme ] [-format (java|protobuf)] [-alias alias] [-renewer renewer ] filename | filename [ filename2 …] |
Fetches tokens from a service at URL and places it in the file.
It’s intended for hosts that have external and internal names, for example firewall.com:14000.
The The |
append [-format (java|protobuf)] filename filename2 [ filename3 …] |
Appends the contents of the first |
remove -alias alias [-format (java|protobuf)] filename [ filename2 …] |
From each file specified, removes the tokens matching |
cancel -alias alias [-format (java|protobuf)] filename [ filename2 …] |
Identical to |
renew -alias alias [-format (java|protobuf)] filename [ filename2 …] |
For each file specified, renews the tokens matching alias and writes out each file using specified format.
The |
import base64 [-alias alias ] filename |
Imports Base64 token.
The |