[HADOOP-9804] Hadoop RPC TokenAuthn method

• Type: Task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Labels: TokenAuth
• Assignee: Kai Zheng
• Reporter: Kai Zheng
• Created: 31/Jul/13 11:32
• Updated: 14/Sep/14 17:59

Description

As defined in TokenAuth framework, TokenAuthn as a new authentication method is to be added in current Hadoop SASL authentication framework, to allow client to access service with access token. The scope of this is as follows:

• Add a new SASL mechanism for TokenAuthn method, including necessary SASL client and SASL server with corresponding callbacks;
• Add TokenAuthn method in UGI and allow the method to be configured for Hadoop and the ecosystem;
• Allow TokenAuthn method to be negotiated between client and server;
• Define the IDP-initiated flow and SP-initiated flow in the RPC access;
• Allow access token to be negotiated between client and server, considering both IDP-initiated case and SP-initiated case.

Issue Links

• incorporates: HADOOP-9950 Add TokenAuthn authentication method in UGI
• incorporates: HADOOP-9951 Add SASL mechanism for TokenAuthn method
• Is contained by: HADOOP-9796 Pluggable TokenAuth framework and core facilities