[HDFS-13061] SaslDataTransferClient#checkTrustAndSend should not trust a partially trusted channel

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.1.0
• Hadoop Flags: Reviewed
• Assignee: Ajay Kumar
• Reporter: Xiaoyu Yao
• Created: 24/Jan/18 23:55
• Updated: 31/Jan/18 21:03
• Resolved: 31/Jan/18 18:57

Description

HDFS-5910 introduces encryption negotiation between client and server based on a customizable TrustedChannelResolver class. The TrustedChannelResolver is invoked on both client and server side. If the resolver indicates that the channel is trusted, then the data transfer will not be encrypted even if dfs.encrypt.data.transfer is set to true.

SaslDataTransferClient#checkTrustAndSend ask the channel resolve whether the client and server address are trusted, respectively. It decides the channel is untrusted only if both client and server are not trusted to enforce encryption. This ticket is opened to change it to not trust (and encrypt) if either client or server address are not trusted.