Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Won't Do
-
1.2.1
-
None
-
None
-
None
Description
Add ability in Hadoop servers (Namenode, JobTracker Datanode ) to support multiple QOP (Authentication , Privacy) simlutaneously
Hadoop Servers currently support only one QOP(quality of protection)for the whole cluster.
We want Hadoop servers to support multiple QOP at the same time.
The logic used to determine the QOP should be pluggable.
This will enable hadoop servers to communicate with different types of clients with different QOP.
A sample usecase:
Let each Hadoop server support two QOP .
1. Authentication
2. Privacy (Privacy includes Authentication) .
The Hadoop servers and internal clients require to do Authentication only without incurring cost of encryption. External clients use Privacy.
An ip-whitelist logic to determine the QOP is provided and used as the default QOP resolution logic.
Attachments
Attachments
Issue Links
- depends upon
-
HDFS-5290 Port Encryption Support in DataTransfer protocol to Hadoop 1
- Resolved
- is related to
-
HADOOP-9709 Add ability in Hadoop servers (Namenode, Datanode, ResourceManager ) to support multiple QOP (Authentication , Privacy)
- Resolved
- relates to
-
HADOOP-10211 Enable RPC protocol to negotiate SASL-QOP values between clients and servers
- Closed