[HDFS-1033] In secure clusters, NN and SNN should verify that the remote principal during image and edits transfer

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.22.0
• Fix Version/s: 0.22.0
• Component/s: namenode, security
• Hadoop Flags: Reviewed
• Assignee: Jakob Homan
• Reporter: Jakob Homan
• Created: 11/Mar/10 00:32
• Updated: 12/Dec/11 06:19
• Resolved: 10/Jul/10 19:37

Description

Currently anyone can connect and download image/edits from Namenode. In a secure cluster we can verify the identity of the principal making the request; we should disallow requests from anyone except the NN and SNN principals (and their hosts due to the lousy KerbSSL limitation).