Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: common-issues@hadoop.apache.org
Date: Wed, 17 Oct 2012 20:22:06 +0000 (UTC)
From: "Kan Zhang (JIRA)" <jira@apache.org>
To: common-issues@hadoop.apache.org
Message-ID: <1339987497.60032.1350505326469.JavaMail.jiratomcat@arcas>
In-Reply-To: <1124228608.51222.1347037448145.JavaMail.jiratomcat@arcas>
Subject: [jira] [Commented] (HADOOP-8779) Use tokens regardless of
 authentication type
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/HADOOP-8779?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13478331#comment-13478331 ] 

Kan Zhang commented on HADOOP-8779:
-----------------------------------

On the server side, you can support both SIMPLE and DIEGST-MD5 (token) simultaneously. It's up to the client to choose which method to use. But the client side code needs to make a decision. Without an option to specify the desired behavior, the client code can only default to one behavior. See more discussion in HDFS-4056.
                
> Use tokens regardless of authentication type
> --------------------------------------------
>
>                 Key: HADOOP-8779
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8779
>             Project: Hadoop Common
>          Issue Type: New Feature
>          Components: fs, security
>    Affects Versions: 3.0.0, 2.0.2-alpha
>            Reporter: Daryn Sharp
>            Assignee: Daryn Sharp
>
> Security is a combination of authentication and authorization (tokens).  Authorization may be granted independently of the authentication model.  Tokens should be used regardless of simple or kerberos authentication.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira