[HADOOP-7621] alfredo config should be in a file not readable by users

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 0.20.205.0, 0.23.0, 0.24.0
• Fix Version/s: 1.1.0, 0.22.1, 0.23.3
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Aaron Myers
• Reporter: Alejandro Abdelnur
• Created: 10/Sep/11 01:02
• Updated: 16/Mar/15 19:25
• Resolved: 21/Sep/11 20:04

Description

[thxs ATM for point this one out]

Alfredo configuration currently is stored in the core-site.xml file, this file is readable by users (it must be as Configuration defaults must be loaded).

One of Alfredo config values is a secret which is used by all nodes to sign/verify the authentication cookie.

A user could get hold of this secret and forge authentication cookies for other users.

Because of this the Alfredo configuration, should be move to a user non-readable file.

Issue Links

• is depended upon by: HADOOP-8357 Restore security in Hadoop 0.22 branch
• relates to: HADOOP-8043 KerberosAuthenticationFilter and friends have some problems
• requires: HADOOP-7119 add Kerberos HTTP SPNEGO authentication support to Hadoop JT/NN/DN/TT web-consoles