[HDFS-6188] An ip whitelist based implementation of TrustedChannelResolver

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.6.0
• Component/s: security
• Target Version/s: 2.6.0
• Hadoop Flags: Reviewed
• Assignee: Benoy Antony
• Reporter: Benoy Antony
• Created: 02/Apr/14 19:01
• Updated: 01/Dec/14 03:07
• Resolved: 18/Aug/14 20:50

Description

HDFS-5910 added ability to plugin an custom logic to determine whether a channel is trusted or not, via TrustedChannelResolver

Attached is an implementation of TrustedChannelResolver based on a ip whitelist.
This is dependent on HADOOP-10335 which has the support for ip whitelist

Issue Links

• depends upon: HADOOP-10335 An ip whitelist based implementation to resolve Sasl properties per connection