[HADOOP-9621] Document/analyze current Hadoop security model

• Type: Task
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Component/s: security
• Labels: documentation
• Tags: security
• Assignee: Unassigned
• Reporter: Brian Swan
• Created: 05/Jun/13 20:08
• Updated: 02/Feb/16 11:56

Description

In light of the proposed changes to Hadoop security in Hadoop-9533 and Hadoop-9392, having a common, detailed understanding (in the form of a document) of the benefits/drawbacks of the current security model and how it works would be useful. The document should address all security principals, their authentication mechanisms, and handling of shared secrets through the lens of the following principles: Minimize attack surface area, Establish secure defaults, Principle of Least privilege, Principle of Defense in depth, Fail securely, Don’t trust services, Separation of duties, Avoid security by obscurity, Keep security simple, Fix security issues correctly.

Issue Links

• is related to: HADOOP-9392 Token based authentication and Single Sign On
• is related to: HADOOP-9533 Centralized Hadoop SSO/Token Server
• is related to: HADOOP-10086 User document for authentication in secure cluster
• relates to: HADOOP-4487 Security features for Hadoop
• relates to: YARN-4653 Document YARN security model from the perspective of Application Developers