Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-14400

Fix HBase RPC protection documentation

    XMLWordPrintableJSON

Details

    • Reviewed
    • Hide
      To use rpc protection in HBase, set the value of 'hbase.rpc.protection' to:
      'authentication' : simple authentication using kerberos
      'integrity' : authentication and integrity
      'privacy' : authentication and confidentiality

      Earlier, HBase reference guide erroneously mentioned in some places to set the value to 'auth-conf'. This patch fixes the guide and adds temporary support for erroneously recommended values.
      Show
      To use rpc protection in HBase, set the value of 'hbase.rpc.protection' to: 'authentication' : simple authentication using kerberos 'integrity' : authentication and integrity 'privacy' : authentication and confidentiality Earlier, HBase reference guide erroneously mentioned in some places to set the value to 'auth-conf'. This patch fixes the guide and adds temporary support for erroneously recommended values.

    Description

      HBase configuration 'hbase.rpc.protection' can be set to 'authentication', 'integrity' or 'privacy'.
      "authentication means authentication only and no integrity or privacy; integrity implies
      authentication and integrity are enabled; and privacy implies all of
      authentication, integrity and privacy are enabled."

      However hbase ref guide incorrectly suggests in some places to set the value to 'auth-conf' instead of 'privacy'. Setting value to 'auth-conf' doesn't provide rpc encryption which is what user wants.

      This jira will fix:

      • documentation: change 'auth-conf' references to 'privacy'
      • SaslUtil to support both set of values (privacy/integrity/authentication and auth-conf/auth-int/auth) to be backward compatible with what was being suggested till now.
      • change 'hbase.thrift.security.qop' to be consistent with other similar configurations by using same set of values (privacy/integrity/authentication).

      Attachments

        1. HBASE-14400-branch-0.98.patch
          10 kB
          Apekshit Sharma
        2. HBASE-14400-branch-1.0.patch
          10 kB
          Apekshit Sharma
        3. HBASE-14400-branch-1.1.patch
          10 kB
          Apekshit Sharma
        4. HBASE-14400-branch-1.2.patch
          10 kB
          Apekshit Sharma
        5. HBASE-14400-master.patch
          10 kB
          Apekshit Sharma
        6. HBASE-14400-master-v2.patch
          12 kB
          Apekshit Sharma

        Activity

          People

            appy Apekshit Sharma
            appy Apekshit Sharma
            Votes:
            0 Vote for this issue
            Watchers:
            8 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: