Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-10221

Add a plugin to specify SaslProperties for RPC protocol based on connection properties

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.2.0
    • 2.4.0
    • security
    • None
    • Reviewed
    • Hide
      SaslPropertiesResolver or its subclass is used to resolve the QOP used for a connection. The subclass can be specified via "hadoop.security.saslproperties.resolver.class" configuration property. If not specified, the full set of values specified in hadoop.rpc.protection is used while determining the QOP used for the connection. If a class is specified, then the QOP values returned by the class will be used while determining the QOP used for the connection.

      Note that this change, effectively removes SaslRpcServer.SASL_PROPS which was a public field. Any use of this variable should be replaced with the following code:
      SaslPropertiesResolver saslPropsResolver = SaslPropertiesResolver.getInstance(conf);
      Map<String, String> sasl_props = saslPropsResolver.getDefaultProperties();
      Show
      SaslPropertiesResolver or its subclass is used to resolve the QOP used for a connection. The subclass can be specified via "hadoop.security.saslproperties.resolver.class" configuration property. If not specified, the full set of values specified in hadoop.rpc.protection is used while determining the QOP used for the connection. If a class is specified, then the QOP values returned by the class will be used while determining the QOP used for the connection. Note that this change, effectively removes SaslRpcServer.SASL_PROPS which was a public field. Any use of this variable should be replaced with the following code: SaslPropertiesResolver saslPropsResolver = SaslPropertiesResolver.getInstance(conf); Map<String, String> sasl_props = saslPropsResolver.getDefaultProperties();

    Description

      Add a plugin to specify SaslProperties for RPC protocol based on connection properties.

      HADOOP-10211 enables client and server to specify and support multiple QOP. Some connections needs to be restricted to a specific set of QOP based on connection properties.
      Eg. connections from client from a specific subnet needs to be encrypted (QOP=privacy)

      Attachments

        1. HADOOP-10221.no-static.example
          11 kB
          Daryn Sharp
        2. HADOOP-10221.patch
          18 kB
          Benoy Antony
        3. HADOOP-10221.patch
          18 kB
          Benoy Antony
        4. HADOOP-10221.patch
          19 kB
          Benoy Antony
        5. HADOOP-10221.patch
          19 kB
          Benoy Antony
        6. HADOOP-10221.patch
          19 kB
          Benoy Antony
        7. HADOOP-10221.patch
          17 kB
          Benoy Antony
        8. HADOOP-10221.patch
          18 kB
          Benoy Antony
        9. HADOOP-10221.patch
          18 kB
          Benoy Antony
        10. HADOOP-10221.patch
          16 kB
          Benoy Antony
        11. HADOOP-10221.patch
          16 kB
          Benoy Antony
        12. HADOOP-10221.patch
          15 kB
          Benoy Antony

        Issue Links

          Activity

            People

              benoyantony Benoy Antony
              benoyantony Benoy Antony
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: