Return-Path: X-Original-To: apmail-hadoop-hdfs-issues-archive@minotaur.apache.org Delivered-To: apmail-hadoop-hdfs-issues-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 617C617677 for ; Fri, 20 Mar 2015 04:24:39 +0000 (UTC) Received: (qmail 55377 invoked by uid 500); 20 Mar 2015 04:24:39 -0000 Delivered-To: apmail-hadoop-hdfs-issues-archive@hadoop.apache.org Received: (qmail 55318 invoked by uid 500); 20 Mar 2015 04:24:39 -0000 Mailing-List: contact hdfs-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: hdfs-issues@hadoop.apache.org Delivered-To: mailing list hdfs-issues@hadoop.apache.org Received: (qmail 55305 invoked by uid 99); 20 Mar 2015 04:24:39 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 20 Mar 2015 04:24:39 +0000 Date: Fri, 20 Mar 2015 04:24:39 +0000 (UTC) From: "Hadoop QA (JIRA)" To: hdfs-issues@hadoop.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (HDFS-6826) Plugin interface to enable delegation of HDFS authorization assertions MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HDFS-6826?page=3Dcom.atlassian.= jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=3D14370= 689#comment-14370689 ]=20 Hadoop QA commented on HDFS-6826: --------------------------------- {color:red}-1 overall{color}. Here are the results of testing the latest a= ttachment=20 http://issues.apache.org/jira/secure/attachment/12705775/HDFS-6826.12.pat= ch against trunk revision e37ca22. {color:green}+1 @author{color}. The patch does not contain any @author= tags. {color:green}+1 tests included{color}. The patch appears to include 2 = new or modified test files. {color:green}+1 javac{color}. The applied patch does not increase the = total number of javac compiler warnings. {color:red}-1 javadoc{color}. The javadoc tool appears to have generat= ed 3 warning messages. See https://builds.apache.org/job/PreCommit-HDFS-Build/9990//artifa= ct/patchprocess/diffJavadocWarnings.txt for details. {color:green}+1 eclipse:eclipse{color}. The patch built with eclipse:e= clipse. {color:green}+1 findbugs{color}. The patch does not introduce any new = Findbugs (version 2.0.3) warnings. {color:green}+1 release audit{color}. The applied patch does not incre= ase the total number of release audit warnings. {color:red}-1 core tests{color}. The patch failed these unit tests in = hadoop-hdfs-project/hadoop-hdfs: org.apache.hadoop.hdfs.shortcircuit.TestShortCircuitLocal= Read org.apache.hadoop.security.TestPermission org.apache.hadoop.hdfs.TestDFSShell org.apache.hadoop.hdfs.web.TestWebHDFSXAttr org.apache.hadoop.hdfs.TestDistributedFileSystem org.apache.hadoop.hdfs.web.TestWebHDFS org.apache.hadoop.hdfs.server.namenode.snapshot.TestAclWi= thSnapshot org.apache.hadoop.security.TestPermissionSymlinks org.apache.hadoop.hdfs.server.namenode.ha.TestRetryCacheW= ithHA org.apache.hadoop.hdfs.web.TestFSMainOperationsWebHdfs org.apache.hadoop.hdfs.server.namenode.TestFileContextAcl org.apache.hadoop.hdfs.TestDFSPermission org.apache.hadoop.hdfs.server.namenode.TestAuditLogger org.apache.hadoop.hdfs.server.namenode.snapshot.TestSnaps= hottableDirListing org.apache.hadoop.fs.TestGlobPaths org.apache.hadoop.hdfs.server.namenode.TestFileContextXAt= tr org.apache.hadoop.hdfs.server.namenode.TestFileTruncate org.apache.hadoop.hdfs.TestFileAppend2 org.apache.hadoop.hdfs.server.namenode.TestNameNodeXAttr org.apache.hadoop.hdfs.web.TestWebHdfsFileSystemContract org.apache.hadoop.hdfs.TestEncryptionZones org.apache.hadoop.hdfs.server.namenode.TestNameNodeAcl org.apache.hadoop.hdfs.TestFsShellPermission org.apache.hadoop.tracing.TestTracing org.apache.hadoop.hdfs.server.balancer.TestBalancer org.apache.hadoop.hdfs.TestEncryptionZonesWithKMS org.apache.hadoop.hdfs.TestSafeMode org.apache.hadoop.hdfs.server.namenode.TestFsck org.apache.hadoop.hdfs.security.TestDelegationTokenForPro= xyUser org.apache.hadoop.hdfs.server.namenode.TestAuditLogs org.apache.hadoop.hdfs.server.namenode.TestFSPermissionCh= ecker org.apache.hadoop.hdfs.web.TestWebHDFSAcl org.apache.hadoop.fs.permission.TestStickyBit Test results: https://builds.apache.org/job/PreCommit-HDFS-Build/9990//test= Report/ Console output: https://builds.apache.org/job/PreCommit-HDFS-Build/9990//co= nsole This message is automatically generated. > Plugin interface to enable delegation of HDFS authorization assertions > ---------------------------------------------------------------------- > > Key: HDFS-6826 > URL: https://issues.apache.org/jira/browse/HDFS-6826 > Project: Hadoop HDFS > Issue Type: New Feature > Components: security > Affects Versions: 2.4.1 > Reporter: Alejandro Abdelnur > Assignee: Arun Suresh > Attachments: HDFS-6826-idea.patch, HDFS-6826-idea2.patch, HDFS-68= 26-permchecker.patch, HDFS-6826.10.patch, HDFS-6826.11.patch, HDFS-6826.12.= patch, HDFS-6826.13.patch, HDFS-6826v3.patch, HDFS-6826v4.patch, HDFS-6826v= 5.patch, HDFS-6826v6.patch, HDFS-6826v7.1.patch, HDFS-6826v7.2.patch, HDFS-= 6826v7.3.patch, HDFS-6826v7.4.patch, HDFS-6826v7.5.patch, HDFS-6826v7.6.pat= ch, HDFS-6826v7.patch, HDFS-6826v8.patch, HDFS-6826v9.patch, HDFSPluggableA= uthorizationProposal-v2.pdf, HDFSPluggableAuthorizationProposal.pdf > > > When Hbase data, HiveMetaStore data or Search data is accessed via servic= es (Hbase region servers, HiveServer2, Impala, Solr) the services can enfor= ce permissions on corresponding entities (databases, tables, views, columns= , search collections, documents). It is desirable, when the data is accesse= d directly by users accessing the underlying data files (i.e. from a MapRed= uce job), that the permission of the data files map to the permissions of t= he corresponding data entity (i.e. table, column family or search collectio= n). > To enable this we need to have the necessary hooks in place in the NameNo= de to delegate authorization to an external system that can map HDFS files/= directories to data entities and resolve their permissions based on the dat= a entities permissions. > I=E2=80=99ll be posting a design proposal in the next few days. -- This message was sent by Atlassian JIRA (v6.3.4#6332)