Page History

@startuml
title Windows Single Active Directory Realm
autonumber
hide footbox

box "User's Desktop"
  actor "User\n(user)" as User
  participant Client as "Hadoop\nClient" #lightgreen
  participant UKT as "User's\nKeytab"
end box

box "Hadoop Cluster"
  participant Hadoop as "Hadoop\nServices\n(eg hdfs)" #lightgreen
  participant SKT as "Service's\nKeytab"
end box

box "Corporate Network"
  participant AD as "ADActive\nDirectory"
end box

note over AD
  Contains user & service
  accounts and groups
end note

Hadoop->AD: kinit(hdfs):hdfs-tgt
  activate Hadoop
  Hadoop->SKT: store(hdfs-tgt)
  deactivate Hadoop

User->AD: kinit(guest):user-tgt
  activate User
  User->UKT: store(user-tgt)
  deactivate User

User->Client: hadoop fs ls
  activate Client
  Client->UKT: load():user-tgt
  Client->AD: tgsReq(user-tgt):user-hdfs-st
  Client->Hadoop: ls[user-hdfs-st](dir):files
    activate Hadoop
    Hadoop->Hadoop: verify(user-hdfs-st)
    Hadoop->AD: groupLookup(user):groups
    deactivate Hadoop
  deactivate Client

@enduml