[HBASE-28952] Add coprocessor hook to authorize user based on client SSL certificate chain

• Type: New Feature
• Status: In Progress
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.0.0-beta-1, 2.6.1
• Component/s: Coprocessors, rpc, security
• Labels: pull-request-available
• Assignee: Andor Molnar
• Reporter: Andor Molnar
• Created: 01/Nov/24 21:49
• Updated: 1 week ago 16:16

Description

In order to authorize the connected user based on the provided SSL client certificate chain, a new coprocessor hook is needed for Master and RegionServer, because currently there's no way to abort connection by a coprocessor when or after the user is authenticated.

Issue Links

• links to: GitHub Pull Request #6447