[HADOOP-8215] Security support for ZK Failover controller

• Type: Improvement
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 0.23.3, 0.24.0
• Fix Version/s: Auto Failover (HDFS-3042)
• Component/s: auto-failover, ha
• Target Version/s: Auto Failover (HDFS-3042)
• Hadoop Flags: Reviewed
• Assignee: Todd Lipcon
• Reporter: Todd Lipcon
• Created: 26/Mar/12 22:18
• Updated: 03/Apr/12 23:37
• Resolved: 03/Apr/12 23:37

Description

To keep the initial patches manageable, kerberos security is not currently supported in the ZKFC implementation. This JIRA is to support the following important pieces for security:

• integrate with ZK authentication (kerberos or password-based)
• allow the user to configure ACLs for the relevant znodes
• add keytab configuration and login to the ZKFC daemons
• ensure that the RPCs made by the health monitor and failover controller properly authenticate to the target daemons

Issue Links

• relates to: HADOOP-8206 Common portion of ZK-based failover controller
• relates to: HDFS-3042 Automatic failover support for NN HA