accumulo-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Josh Elser (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (ACCUMULO-3490) Enable SPNEGO authentication for monitor
Date Sun, 18 Jan 2015 06:03:34 GMT

    [ https://issues.apache.org/jira/browse/ACCUMULO-3490?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14281675#comment-14281675
] 

Josh Elser commented on ACCUMULO-3490:
--------------------------------------

bq. The shell servlet integration seems like a separate, follow-on issue

Perhaps. My guess is that it would be very trivial to enable.

bq. What would it take to get this to work?

I haven't yet looked into what Hadoop presently does to enable this.

> Enable SPNEGO authentication for monitor
> ----------------------------------------
>
>                 Key: ACCUMULO-3490
>                 URL: https://issues.apache.org/jira/browse/ACCUMULO-3490
>             Project: Accumulo
>          Issue Type: Improvement
>          Components: monitor
>            Reporter: Josh Elser
>            Assignee: Josh Elser
>             Fix For: 1.7.0
>
>
> In non-technical terms, if we configure the monitor to support SPNEGO, we can get KRB
authentication of clients trying to connect to the Accumulo monitor. This is a typical deployment
decision made with Hadoop to protect things like the NN overview page and the RM page.
> Including some authentication for the monitor has some general benefit. It would also
be a neat integration with the shell servlet -- automatically log you in and start using the
shell in your web-browser.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message