Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-7119

add Kerberos HTTP SPNEGO authentication support to Hadoop JT/NN/DN/TT web-consoles

    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 0.23.0
    • 0.20.205.0, 0.22.1, 0.23.0
    • security
    • None

    • all

    • Reviewed
    • Adding support for Kerberos HTTP SPNEGO authentication to the Hadoop web-consoles

    Description

      Currently the JT/NN/DN/TT web-consoles don't support any form of authentication.

      Hadoop RPC API already supports Kerberos authentication.

      Kerberos enables single sign-on.

      Popular browsers (Firefox and Internet Explorer) have support for Kerberos HTTP SPNEGO.

      Adding support for Kerberos HTTP SPNEGO to Hadoop web consoles would provide a unified authentication mechanism and single sign-on for Hadoop web UI and Hadoop RPC.

      Attachments

        1. spnego-20-security4.patch
          167 kB
          Sanjay Radia
        2. spnego-20-security3.patch
          166 kB
          Sanjay Radia
        3. spnego-20-security2.patch
          161 kB
          Sanjay Radia
        4. spnego-20-security.patch
          158 kB
          Sanjay Radia
        5. HADOOP-7119v6.patch
          245 kB
          Alejandro Abdelnur
        6. HADOOP-7119v5.patch
          246 kB
          Alejandro Abdelnur
        7. HADOOP-7119v4-amendment.patch
          59 kB
          Aaron Myers
        8. HADOOP-7119v4.patch
          203 kB
          Alejandro Abdelnur
        9. HADOOP-7119v3.patch
          203 kB
          Alejandro Abdelnur
        10. hadoop-7119-022.patch
          167 kB
          Benoy Antony
        11. hadoop-7119-022.patch
          168 kB
          Benoy Antony
        12. ha-commons.patch
          15 kB
          Alejandro Abdelnur
        13. ha-common-02.patch
          18 kB
          Alejandro Abdelnur
        14. ha-common-01.patch
          18 kB
          Alejandro Abdelnur

        Issue Links

          breaks

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-7567 mvn eclipse:eclipse fails for hadoop-alredo

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-7576 Fix findbugs warnings in Hadoop Auth (Alfredo)

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-7898 Fix javadoc warnings in AuthenticationToken.java

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-8119 Fix javac warnings in TestAuthenticationFilter

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          depends upon

          Task - A task that needs to be done. MAPREDUCE-2856 wire hadoop-mapreduce build to trunk build in Maven POM

          • Major - Major loss of function.
          • Resolved
          incorporates

          New Feature - A new feature of the product, which has yet to be developed. HDFS-1604 add Kerberos HTTP SPNEGO authentication support to Hadoop JT/NN/DN/TT web-consoles

          • Major - Major loss of function.
          • Resolved

          New Feature - A new feature of the product, which has yet to be developed. MAPREDUCE-2287 add Kerberos HTTP SPNEGO authentication support to Hadoop JT/NN/DN/TT web-consoles

          • Major - Major loss of function.
          • Resolved
          is depended upon by

          Improvement - An improvement or enhancement to an existing feature or task. HDFS-2178 HttpFS - a read/write Hadoop file system proxy

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. HADOOP-8357 Restore security in Hadoop 0.22 branch

          • Major - Major loss of function.
          • Resolved
          is related to

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-7645 HTTP auth tests requiring Kerberos infrastructure are not disabled on branch-0.20-security

          • Blocker - Blocks development and/or testing work, production could not run
          • Closed

          Task - A task that needs to be done. HADOOP-7579 Rename package names from alfredo to auth

          • Major - Major loss of function.
          • Closed
          is required by

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-7621 alfredo config should be in a file not readable by users

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. HDFS-2380 Security downgrade of token validation

          • Major - Major loss of function.
          • Open

          Improvement - An improvement or enhancement to an existing feature or task. IMPALA-5278 Add Kerberos HTTP SPNEGO authentication support to Impala web consoles

          • Major - Major loss of function.
          • Resolved

          Task - A task that needs to be done. SPARK-18452 Support History Server UI to use SPNEGO

          • Major - Major loss of function.
          • Closed

          Activity

            People

              tucu00 Alejandro Abdelnur
              tucu00 Alejandro Abdelnur
              Votes:
              0 Vote for this issue
              Watchers:
              30 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: