Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-14400

Fix HBase RPC protection documentation

    XMLWordPrintableJSON

    Details

    • Hadoop Flags:
      Reviewed
    • Release Note:
      Hide
      To use rpc protection in HBase, set the value of 'hbase.rpc.protection' to:
      'authentication' : simple authentication using kerberos
      'integrity' : authentication and integrity
      'privacy' : authentication and confidentiality

      Earlier, HBase reference guide erroneously mentioned in some places to set the value to 'auth-conf'. This patch fixes the guide and adds temporary support for erroneously recommended values.
      Show
      To use rpc protection in HBase, set the value of 'hbase.rpc.protection' to: 'authentication' : simple authentication using kerberos 'integrity' : authentication and integrity 'privacy' : authentication and confidentiality Earlier, HBase reference guide erroneously mentioned in some places to set the value to 'auth-conf'. This patch fixes the guide and adds temporary support for erroneously recommended values.

      Description

      HBase configuration 'hbase.rpc.protection' can be set to 'authentication', 'integrity' or 'privacy'.
      "authentication means authentication only and no integrity or privacy; integrity implies
      authentication and integrity are enabled; and privacy implies all of
      authentication, integrity and privacy are enabled."

      However hbase ref guide incorrectly suggests in some places to set the value to 'auth-conf' instead of 'privacy'. Setting value to 'auth-conf' doesn't provide rpc encryption which is what user wants.

      This jira will fix:

      • documentation: change 'auth-conf' references to 'privacy'
      • SaslUtil to support both set of values (privacy/integrity/authentication and auth-conf/auth-int/auth) to be backward compatible with what was being suggested till now.
      • change 'hbase.thrift.security.qop' to be consistent with other similar configurations by using same set of values (privacy/integrity/authentication).

        Attachments

        1. HBASE-14400-master-v2.patch
          12 kB
          Appy
        2. HBASE-14400-master.patch
          10 kB
          Appy
        3. HBASE-14400-branch-1.2.patch
          10 kB
          Appy
        4. HBASE-14400-branch-1.1.patch
          10 kB
          Appy
        5. HBASE-14400-branch-1.0.patch
          10 kB
          Appy
        6. HBASE-14400-branch-0.98.patch
          10 kB
          Appy

          Activity

            People

            • Assignee:
              appy Appy
              Reporter:
              appy Appy
            • Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: