Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-2184

RPC Support for user permissions and authentication.

    XMLWordPrintableJSON

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 0.15.0
    • Fix Version/s: 0.16.0
    • Component/s: ipc
    • Labels:
      None

      Description

      Update 11/13/2007: What is proposed for 0.16.0 :

      The client can set a user ticket (as defined in HADOOP-1701) for each connection and that ticket is made available to RPC calls at the server. The client can replace the ticket at any time. The main advantage is that rest of the the client RPCs don't need to be aware of the user tickets.

      What RPC would ideally support in future :

      In the current version of RPC, there is no authentication or data protection. We propose to change the RPC framework, so that secure communication is possible.

      The new RPC should:

      • Compatible with current RPC
      • Allow a pluggable security implementations (see HADOOP-1701)
      • Support both secure and non-secure modes.

      Here is a rough idea:

      • Store security information (e.g. username, keys) in a ticket
      • Use the ticket to establish a RPC connection
      • Create secure sockets by the (subclass of) SocketFactory corresponding to the selected security implementations
      • Send the data and RPC parameters with the secure sockets

      When authentication is supported, the RPC callee should also initialize caller information during RPC setup and execute the RPC on the caller's behalf.

        Attachments

        1. HADOOP-2184.patch
          19 kB
          Raghu Angadi
        2. HADOOP-2184-demo.patch
          19 kB
          Raghu Angadi
        3. HADOOP-2184-demo.patch
          18 kB
          Raghu Angadi
        4. HADOOP-2184-demo.patch
          17 kB
          Raghu Angadi
        5. HADOOP-2184-demo.patch
          17 kB
          Raghu Angadi
        6. HADOOP-2184-demo.patch
          25 kB
          Raghu Angadi

          Issue Links

            Activity

              People

              • Assignee:
                rangadi Raghu Angadi
                Reporter:
                szetszwo Tsz-wo Sze
              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: