[HDFS-6859] Allow dfs.data.transfer.protection default to hadoop.rpc.protection

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Won't Fix
• Affects Version/s: 2.5.0
• Component/s: security
• Assignee: Benoy Antony
• Reporter: Benoy Antony
• Created: 17/Aug/14 16:42
• Updated: 08/Feb/18 11:48
• Resolved: 18/Aug/14 19:58

Description

Currently administrator needs to configure both dfs.data.transfer.protection and hadoop.rpc.protection to specify QOP for rpc and data transfer protocols. In some cases, the values for these two properties will be same. In those cases, it may be easier to allow dfs.data.transfer.protection default to hadoop.rpc.protection.
This also ensures that an admin will get QOP as Authentication if admin does not specify either of those values.

Separate jiras (HDFS-6858 and HDFS-6859) are created for dfs.data.transfer.saslproperties.resolver.class and dfs.data.transfer.protection respectively.

Issue Links

• relates to: HDFS-2856 Fix block protocol so that Datanodes don't require root or jsvc
• relates to: AMBARI-22803 Update Hadoop RPC Encryption Properties During Kerberization