[HDFS-5539] NFS gateway secuirty enhancement

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: nfs
• Assignee: Jing Zhao
• Reporter: Brandon Li
• Created: 21/Nov/13 01:31
• Updated: 21/Nov/13 02:04

Description

Currently, NFS gateway only supports AUTH_UNIX RPC authentication.
AUTH_UNIX is easy to deploy and use but lack of strong security support.

This JIRA is to track the effort of NFS gateway security enhancement, such as RPCSEC_GSS framework and end to end Kerberos support.

Issue Links

• relates to: HDFS-4750 Support NFSv3 interface to HDFS

Sub-Tasks

• Support RPCSEC_GSS authentication in NFSv3 gateway: Open
• HDFS NFS Gateway fails to mount and proxy when using Kerberos: Closed
• Allow NFS gateway to login/relogin from its kerberos keytab: Closed
• Fix inconsistent description in NFS user guide doc for proxy user: Resolved
• Jira HDFS-5804 breaks default nfs-gateway behavior for unsecured config: Closed