TGT 服务器的优化块设备协议 • NBD • Linux专有块设备协议 • iSCSI • 广泛支持的外部设备协议（块，磁带等）Curve云原生存储支持块设备 • 通过NBD，只支持Linux • 通过SDK API，目前只支持Linux • PFS • 扩大使用范围 • 通过iSCSI支持更多系统，例如Windows, 类UNIX系统等，使用两项基础 技术 • TCP/IP target 服务器 • TGT(STGT) • 比较久的历史，原来叫STGT，后来改成TGT • 纯用户态，不与内核绑定 • 支持复杂的存储系统，例如ceph rbd, sheepdog, glfs • 纯C代码，外加一些脚本 • 完整的源代码和维护工具、手册 • 编写IO驱动比较容易，容易扩展支持新的存储系统 • 代码独立，容易编译、调试、修改，适应性强让TGT支持curve • 编写c 编写curve驱动，底层异步提交I/O，pipeline • 利用NEBD PART 1接口，需要与nebdserver运行在同一台机器 • 支持共享打开，两台TGT服务器可以同时打开一个curve卷 • 让Initiator可以使用multipath • 支持卷resize • 添加新的命令 • tgtadm --mode logicalunit --op update --tid 1 --lun

ticket-granting ticket(TGT). 3. Kerberos client stores TGT into a ticket cache. 4. JDBC client, such as beeline and BI tools, reads TGT from the ticket cache. 5. JDBC client sends TGT and server principal should be configured to point to the same KDC as Kyuubi points to. Get Kerberos TGT Execute kinit command to get TGT from KDC. Suppose user principal is kyuubi_user@KYUUBI.APACHE.ORG and user keytab to get TGT: $ kinit kyuubi_user@KYUUBI.APACHE.ORG Password for kyuubi_user@KYUUBI.APACHE.ORG: password (Command is identical on different OS platform) If the command executes successfully, TGT will be

ticket-granting ticket(TGT). 3. Kerberos client stores TGT into a ticket cache. 4. JDBC client, such as beeline and BI tools, reads TGT from the ticket cache. 5. JDBC client sends TGT and server principal should be configured to point to the same KDC as Kyuubi points to. Get Kerberos TGT Execute kinit command to get TGT from KDC. Suppose user principal is kyuubi_user@KYUUBI.APACHE.ORG and user keytab to get TGT: $ kinit kyuubi_user@KYUUBI.APACHE.ORG Password for kyuubi_user@KYUUBI.APACHE.ORG: password (Command is identical on different OS platform) If the command executes successfully, TGT will be

ticket-granting ticket(TGT). 3. Kerberos client stores TGT into a ticket cache. 4. JDBC client, such as beeline and BI tools, reads TGT from the ticket cache. 5. JDBC client sends TGT and server principal should be configured to point to the same KDC as Kyuubi points to. Get Kerberos TGT Execute kinit command to get TGT from KDC. Suppose user principal is kyuubi_user@KYUUBI.APACHE.ORG and user keytab to get TGT: $ kinit kyuubi_user@KYUUBI.APACHE.ORG Password for kyuubi_user@KYUUBI.APACHE.ORG: password (Command is identical on different OS platform) If the command executes successfully, TGT will be

ticket-granting ticket(TGT). 3. Kerberos client stores TGT into a ticket cache. 4. JDBC client, such as beeline and BI tools, reads TGT from the ticket cache. 5. JDBC client sends TGT and server principal should be configured to point to the same KDC as Kyuubi points to. Get Kerberos TGT Execute kinit command to get TGT from KDC. Suppose user principal is kyuubi_user@KYUUBI.APACHE.ORG and user keytab to get TGT: $ kinit kyuubi_user@KYUUBI.APACHE.ORG Password for kyuubi_user@KYUUBI.APACHE.ORG: password (Command is identical on different OS platform) If the command executes successfully, TGT will be

ticket-granting ticket(TGT). 3. Kerberos client stores TGT into a ticket cache. 4. JDBC client, such as beeline and BI tools, reads TGT from the ticket cache. 5. JDBC client sends TGT and server principal should be configured to point to the same KDC as Kyuubi points to. Get Kerberos TGT Execute kinit command to get TGT from KDC. Suppose user principal is kyuubi_user@KYUUBI.APACHE.ORG and user keytab to get TGT: $ kinit kyuubi_user@KYUUBI.APACHE.ORG Password for kyuubi_user@KYUUBI.APACHE.ORG: password (Command is identical on different OS platform) If the command executes successfully, TGT will be

ticket-granting ticket(TGT). 3. Kerberos client stores TGT into a ticket cache. 4. JDBC client, such as beeline and BI tools, reads TGT from the ticket cache. 5. JDBC client sends TGT and server principal should be configured to point to the same KDC as Kyuubi points to. Get Kerberos TGT Execute kinit command to get TGT from KDC. Suppose user principal is kyuubi_user@KYUUBI.APACHE.ORG and user keytab to get TGT: $ kinit kyuubi_user@KYUUBI.APACHE.ORG Password for kyuubi_user@KYUUBI.APACHE.ORG: password (Command is identical on different OS platform) If the command executes successfully, TGT will be

ticket-granting ticket(TGT). 3. Kerberos client stores TGT into a ticket cache. 4. JDBC client, such as beeline and BI tools, reads TGT from the ticket cache. 5. JDBC client sends TGT and server principal should be configured to point to the same KDC as Kyuubi points to. Get Kerberos TGT Execute kinit command to get TGT from KDC. Suppose user principal is kyuubi_user@KYUUBI.APACHE.ORG and user keytab to get TGT: $ kinit kyuubi_user@KYUUBI.APACHE.ORG Password for kyuubi_user@KYUUBI.APACHE.ORG: password (Command is identical on different OS platform) If the command executes successfully, TGT will be

ticket-granting ticket(TGT). 3. Kerberos client stores TGT into a ticket cache. 4. JDBC client, such as beeline and BI tools, reads TGT from the ticket cache. 5. JDBC client sends TGT and server principal should be configured to point to the same KDC as Kyuubi points to. Get Kerberos TGT Execute kinit command to get TGT from KDC. Suppose user principal is kyuubi_user@KYUUBI.APACHE.ORG and user keytab to get TGT: $ kinit kyuubi_user@KYUUBI.APACHE.ORG Password for kyuubi_user@KYUUBI.APACHE.ORG: password (Command is identical on different OS platform) If the command executes successfully, TGT will be

ticket-granting ticket(TGT). 3. Kerberos client stores TGT into a ticket cache. 4. JDBC client, such as beeline and BI tools, reads TGT from the ticket cache. 5. JDBC client sends TGT and server principal should be configured to point to the same KDC as Kyuubi points to. Get Kerberos TGT Execute kinit command to get TGT from KDC. Suppose user principal is kyuubi_user@KYUUBI.APACHE.ORG and user keytab to get TGT: $ kinit kyuubi_user@KYUUBI.APACHE.ORG Password for kyuubi_user@KYUUBI.APACHE.ORG: password (Command is identical on different OS platform) If the command executes successfully, TGT will be