[HADOOP-9825] Key Provider for TokenAuth

• Type: Task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Labels: TokenAuth
• Assignee: Unassigned
• Reporter: Kai Zheng
• Created: 05/Aug/13 14:17
• Updated: 04/Dec/13 21:04

Description

Key provider is used to retrieve key/certificate for TokenAuth entities and Hadoop services. The scope is as follows:

• Define Key Provider API to query and retrieve key/certificate with specific entity name;
• Define and implement facility to plugin and reference Key Provider implementations for relevant entities;
• Implement simple Key provider based on local key store file.

Issue Links

• duplicates: HADOOP-10141 Create an API to separate encryption key storage from applications
• Is contained by: HADOOP-9796 Pluggable TokenAuth framework and core facilities
• relates to: HADOOP-9534 Credential Management Framework (CMF)