Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: common-issues@hadoop.apache.org
Date: Sun, 14 Sep 2014 17:55:34 +0000 (UTC)
From: "Allen Wittenauer (JIRA)" <jira@apache.org>
To: common-issues@hadoop.apache.org
Message-ID: <JIRA.12653659.1371626101000.30939.1410717334358@Atlassian.JIRA>
In-Reply-To: <JIRA.12653659.1371626101000@Atlassian.JIRA>
References: <JIRA.12653659.1371626101000@Atlassian.JIRA>
 <JIRA.12653659.1371626101033@arcas>
Subject: [jira] [Updated] (HADOOP-9653) Token validation and transmission
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/HADOOP-9653?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Allen Wittenauer updated HADOOP-9653:
-------------------------------------
    Fix Version/s:     (was: 3.0.0)

> Token validation and transmission
> ---------------------------------
>
>                 Key: HADOOP-9653
>                 URL: https://issues.apache.org/jira/browse/HADOOP-9653
>             Project: Hadoop Common
>          Issue Type: Sub-task
>          Components: security
>            Reporter: Kai Zheng
>            Assignee: Kai Zheng
>              Labels: rhino
>
> HADOOP-9392 proposes to have customizable token authenticator for services to implement the TokenAuthn method and it was thought supporting pluggable token validation is a significant feature itself so it serves to be addressed in a separate JIRA. It will also consider how to securely transmit token in Hadoop RPC in a way the defends against all of the classical attacks. Note the authentication negotiation and wrapping of Hadoop RPC should be backwards compatible and interoperable with existing deployments, so therefore be SASL based.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)