Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: common-issues@hadoop.apache.org
Date: Thu, 6 Mar 2014 22:51:45 +0000 (UTC)
From: "Daryn Sharp (JIRA)" <jira@apache.org>
To: common-issues@hadoop.apache.org
Message-ID: <JIRA.12688334.1389389500547.19013.1394146305926@arcas>
In-Reply-To: <JIRA.12688334.1389389500547@arcas>
References: <JIRA.12688334.1389389500547@arcas>
Subject: [jira] [Updated] (HADOOP-10221) Add a plugin to specify
 SaslProperties for RPC protocol based on connection properties
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/HADOOP-10221?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Daryn Sharp updated HADOOP-10221:
---------------------------------

    Attachment: HADOOP-10221.no-static.example

Sorry this jira's review has been delayed, I was dealing with internal issues.

Here's an example patch of what I meant in my original review about removing the static nature of qop.  Currently its a global configuration whereby multiple rpc instances can stomp on each others configuration.  

This is a completely uncompiled & untested example patch.  Hopefully we can kill two birds with one stone: sasl property configuration is pluggable, and rpc servers may each manage their own sasl properties.  Oh, and I added your resolver concept to the rpc client too.

> Add a plugin to specify SaslProperties for RPC protocol based on connection properties
> --------------------------------------------------------------------------------------
>
>                 Key: HADOOP-10221
>                 URL: https://issues.apache.org/jira/browse/HADOOP-10221
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 2.2.0
>            Reporter: Benoy Antony
>            Assignee: Benoy Antony
>         Attachments: HADOOP-10221.no-static.example, HADOOP-10221.patch, HADOOP-10221.patch, HADOOP-10221.patch, HADOOP-10221.patch, HADOOP-10221.patch, HADOOP-10221.patch
>
>
> Add a plugin to specify SaslProperties for RPC protocol based on connection properties.
> HADOOP-10211 enables client and server to specify and support multiple QOP.  Some connections needs to be restricted to a specific set of QOP based on connection properties.
> Eg. connections from client from a specific subnet needs to be encrypted (QOP=privacy)


--
This message was sent by Atlassian JIRA
(v6.2#6252)