[BLUR-346] Blur authentication/authorization infrastructure

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Blur, Blur MapReduce
• Assignee: Aaron McCurry
• Reporter: Steve Sak
• Created: 23/Jul/14 15:39
• Updated: 02/Jun/15 12:39

Description

As components of the hadoop ecosystem implement security (Kerberos in HDFS, Zookeeper, etc.) connecting to these resources requires similar capabilities. Candidates for securing include:

1. Configurable/pluggable authentication for Blur Thrift connections.
2. Configurable/pluggable authentication/authorization for Blur calls.
3. Configurable/pluggable authentication/authorization for ZooKeeper calls.
4. Configurable/pluggable authentication/authorization for Hadoop calls.

Sub-Tasks

• Create a factory pattern for setting up Blur Thrift connections: Closed
• Blur user authentication: Closed
• Allow for SASL ZooKeeper setup: Open
• Allow for secure HDFS setup: Open