Return-Path: Delivered-To: apmail-hadoop-common-issues-archive@minotaur.apache.org Received: (qmail 9311 invoked from network); 4 Feb 2010 17:38:50 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 4 Feb 2010 17:38:50 -0000 Received: (qmail 64906 invoked by uid 500); 4 Feb 2010 17:38:50 -0000 Delivered-To: apmail-hadoop-common-issues-archive@hadoop.apache.org Received: (qmail 64806 invoked by uid 500); 4 Feb 2010 17:38:49 -0000 Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: common-issues@hadoop.apache.org Delivered-To: mailing list common-issues@hadoop.apache.org Received: (qmail 64753 invoked by uid 99); 4 Feb 2010 17:38:49 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 04 Feb 2010 17:38:49 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.140] (HELO brutus.apache.org) (140.211.11.140) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 04 Feb 2010 17:38:48 +0000 Received: from brutus.apache.org (localhost [127.0.0.1]) by brutus.apache.org (Postfix) with ESMTP id 2348829A002E for ; Thu, 4 Feb 2010 09:38:28 -0800 (PST) Message-ID: <2109153112.41961265305108143.JavaMail.jira@brutus.apache.org> Date: Thu, 4 Feb 2010 17:38:28 +0000 (UTC) From: "Doug Cutting (JIRA)" To: common-issues@hadoop.apache.org Subject: [jira] Commented: (HADOOP-6419) Change RPC layer to support SASL based mutual authentication In-Reply-To: <1162452186.1260301038197.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HADOOP-6419?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12829665#action_12829665 ] Doug Cutting commented on HADOOP-6419: -------------------------------------- > It would still be good to get reassurance that someone else was looking at the issue, even if the review is just a "+1 patch looks good" Yes, that is project policy. A committer who is not the patch author should provide a +1 comment before a patch is committed. > Change RPC layer to support SASL based mutual authentication > ------------------------------------------------------------ > > Key: HADOOP-6419 > URL: https://issues.apache.org/jira/browse/HADOOP-6419 > Project: Hadoop Common > Issue Type: New Feature > Components: security > Reporter: Kan Zhang > Assignee: Kan Zhang > Fix For: 0.22.0 > > Attachments: c6419-26.patch, c6419-39.patch, c6419-45.patch, c6419-66.patch, c6419-67.patch, c6419-69.patch, c6419-70.patch, c6419-72.patch, c6419-73.patch, c6419-75.patch > > > The authentication mechanism to use will be SASL DIGEST-MD5 (see RFC-2222 and RFC-2831) or SASL GSSAPI/Kerberos. Since J2SE 5, Sun provides a SASL implementation by default. Both our delegation token and job token can be used as credentials for SASL DIGEST-MD5 authentication. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.