Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-10221

Add a plugin to specify SaslProperties for RPC protocol based on connection properties

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.2.0
    • 2.4.0
    • security
    • None
    • Reviewed
    • Hide
      SaslPropertiesResolver or its subclass is used to resolve the QOP used for a connection. The subclass can be specified via "hadoop.security.saslproperties.resolver.class" configuration property. If not specified, the full set of values specified in hadoop.rpc.protection is used while determining the QOP used for the connection. If a class is specified, then the QOP values returned by the class will be used while determining the QOP used for the connection.

      Note that this change, effectively removes SaslRpcServer.SASL_PROPS which was a public field. Any use of this variable should be replaced with the following code:
      SaslPropertiesResolver saslPropsResolver = SaslPropertiesResolver.getInstance(conf);
      Map<String, String> sasl_props = saslPropsResolver.getDefaultProperties();
      Show
      SaslPropertiesResolver or its subclass is used to resolve the QOP used for a connection. The subclass can be specified via "hadoop.security.saslproperties.resolver.class" configuration property. If not specified, the full set of values specified in hadoop.rpc.protection is used while determining the QOP used for the connection. If a class is specified, then the QOP values returned by the class will be used while determining the QOP used for the connection. Note that this change, effectively removes SaslRpcServer.SASL_PROPS which was a public field. Any use of this variable should be replaced with the following code: SaslPropertiesResolver saslPropsResolver = SaslPropertiesResolver.getInstance(conf); Map<String, String> sasl_props = saslPropsResolver.getDefaultProperties();

    Description

      Add a plugin to specify SaslProperties for RPC protocol based on connection properties.

      HADOOP-10211 enables client and server to specify and support multiple QOP. Some connections needs to be restricted to a specific set of QOP based on connection properties.
      Eg. connections from client from a specific subnet needs to be encrypted (QOP=privacy)

      Attachments

        1. HADOOP-10221.no-static.example
          11 kB
          Daryn Sharp
        2. HADOOP-10221.patch
          18 kB
          Benoy Antony
        3. HADOOP-10221.patch
          18 kB
          Benoy Antony
        4. HADOOP-10221.patch
          19 kB
          Benoy Antony
        5. HADOOP-10221.patch
          19 kB
          Benoy Antony
        6. HADOOP-10221.patch
          19 kB
          Benoy Antony
        7. HADOOP-10221.patch
          17 kB
          Benoy Antony
        8. HADOOP-10221.patch
          18 kB
          Benoy Antony
        9. HADOOP-10221.patch
          18 kB
          Benoy Antony
        10. HADOOP-10221.patch
          16 kB
          Benoy Antony
        11. HADOOP-10221.patch
          16 kB
          Benoy Antony
        12. HADOOP-10221.patch
          15 kB
          Benoy Antony

        Issue Links

          depends upon

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-10211 Enable RPC protocol to negotiate SASL-QOP values between clients and servers

          • Major - Major loss of function.
          • Closed
          is depended upon by

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-10335 An ip whitelist based implementation to resolve Sasl properties per connection

          • Major - Major loss of function.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-10547 Give SaslPropertiesResolver.getDefaultProperties() public scope

          • Major - Major loss of function.
          • Closed
          relates to

          Improvement - An improvement or enhancement to an existing feature or task. HDFS-5910 Enhance DataTransferProtocol to allow per-connection choice of encryption/plain-text

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-10451 Remove unused field and imports from SaslRpcServer

          • Trivial - Cosmetic problem like misspelt words or misaligned text.
          • Closed

          Activity

            People

              benoyantony Benoy Antony
              benoyantony Benoy Antony
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: