hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Erik Krogen (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HDFS-12342) Differentiate webhdfs vs. swebhdfs calls in audit log
Date Wed, 23 Aug 2017 15:53:01 GMT
Erik Krogen created HDFS-12342:

             Summary: Differentiate webhdfs vs. swebhdfs calls in audit log
                 Key: HDFS-12342
                 URL: https://issues.apache.org/jira/browse/HDFS-12342
             Project: Hadoop HDFS
          Issue Type: Improvement
          Components: logging
            Reporter: Erik Krogen
            Assignee: Erik Krogen

Currently the audit log only logs {{webhdfs}} vs {{rpc}} as the {{proto}}. It is useful to
be able to audit whether certain commands were carried out via webhdfs or swebhdfs as this
has different security and potentially performance implications. We have been running this
internally for a while and have found it useful for looking at usage patterns.

Proposal is just to continue logging {{webhdfs}} as the proto for {{http}} WebHDFS commands,
but log {{swebhdfs}} for SWebHDFS (over {{https}}). This will be incompatible.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org

View raw message