Uploaded image for project: 'Hadoop Map/Reduce'
  1. Hadoop Map/Reduce
  2. MAPREDUCE-4491 Encryption and Key Protection
  3. MAPREDUCE-4553

Key Protection : Implement KeyProvider to read key from a WebService Based KeyStore

    XMLWordPrintableJSON

    Details

    • Type: Sub-task
    • Status: Resolved
    • Priority: Major
    • Resolution: Won't Do
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: job submission, security
    • Labels:
      None

      Description

      Normally keys have to be stored in a central location using custom key management system. organizations can implement KeyProvider to integrate their custom key management system to Hadoop. This interface is specified in MAPREDUCE-4550

      Optionally , developers can use Safe to integrate custom key management system with Hadoop.
      Safe is an open source web service based keystore to securely store secret keys and passwords.
      Safe authenticates the user using SPNego, checks whether the user is authorized to read the secret and returns the secret.
      It is easy to plug in different mechanisms for authentication,authorization and Key storage.
      Safe is kept as a separate open source project at (http://benoyantony.github.com/safe/)

      The hadoop proxy to safe is added as a contrib project - hadoop-safe.

        Attachments

        1. MR_4553_trunk.patch
          10 kB
          Benoy Antony
        2. MR_4553_1_1.patch
          14 kB
          Benoy Antony

          Activity

            People

            • Assignee:
              benoyantony Benoy Antony
              Reporter:
              benoyantony Benoy Antony
            • Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: