Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-6419

Change RPC layer to support SASL based mutual authentication

    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 0.21.0
    • security
    • None
    • Reviewed

    Description

      The authentication mechanism to use will be SASL DIGEST-MD5 (see RFC-2222 and RFC-2831) or SASL GSSAPI/Kerberos. Since J2SE 5, Sun provides a SASL implementation by default. Both our delegation token and job token can be used as credentials for SASL DIGEST-MD5 authentication.

      Attachments

        1. c6419-26.patch
          66 kB
          Kan Zhang
        2. c6419-39.patch
          69 kB
          Kan Zhang
        3. c6419-45.patch
          74 kB
          Kan Zhang
        4. c6419-66.patch
          81 kB
          Kan Zhang
        5. c6419-67.patch
          81 kB
          Kan Zhang
        6. c6419-69.patch
          80 kB
          Kan Zhang
        7. c6419-70.patch
          82 kB
          Kan Zhang
        8. c6419-72.patch
          82 kB
          Kan Zhang
        9. c6419-73.patch
          82 kB
          Kan Zhang
        10. c6419-75.patch
          85 kB
          Kan Zhang
        11. HADOOP-6419-0.20-15.patch
          139 kB
          Kan Zhang
        12. 6419-bp20-jobsubmitprotocol.patch
          0.9 kB
          Devaraj Das

        Issue Links

          blocks

          Improvement - An improvement or enhancement to an existing feature or task. HDFS-933 Add createIdentifier() implementation to DelegationTokenSecretManager

          • Major - Major loss of function.
          • Closed
          is depended upon by

          New Feature - A new feature of the product, which has yet to be developed. MAPREDUCE-1335 Add SASL DIGEST-MD5 authentication to TaskUmbilicalProtocol

          • Major - Major loss of function.
          • Closed
          is related to

          New Feature - A new feature of the product, which has yet to be developed. HADOOP-4487 Security features for Hadoop

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. GIRAPH-168 Simplify munge directive usage with new munge flag HADOOP_SECURE (rather than HADOOP_FACEBOOK) and remove usage of HADOOP

          • Major - Major loss of function.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. GIRAPH-211 Add secure authentication to Netty IPC

          • Major - Major loss of function.
          • Resolved
          relates to

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-6572 RPC responses may be out-of-order with respect to SASL

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-6589 Better error messages for RPC clients when authentication fails

          • Major - Major loss of function.
          • Closed

          Activity

            People

              kzhang Kan Zhang
              kzhang Kan Zhang
              Votes:
              0 Vote for this issue
              Watchers:
              14 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: