hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Erik Krogen (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-12342) Differentiate webhdfs vs. swebhdfs calls in audit log
Date Wed, 23 Aug 2017 15:54:00 GMT

    [ https://issues.apache.org/jira/browse/HDFS-12342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16138530#comment-16138530

Erik Krogen commented on HDFS-12342:

Ping [~aw] (I feel you may have thoughts on this) and [~andrew.wang] for a Cloudera opinion.

> Differentiate webhdfs vs. swebhdfs calls in audit log
> -----------------------------------------------------
>                 Key: HDFS-12342
>                 URL: https://issues.apache.org/jira/browse/HDFS-12342
>             Project: Hadoop HDFS
>          Issue Type: Improvement
>          Components: logging
>            Reporter: Erik Krogen
>            Assignee: Erik Krogen
>              Labels: Incompatible
> Currently the audit log only logs {{webhdfs}} vs {{rpc}} as the {{proto}}. It is useful
to be able to audit whether certain commands were carried out via webhdfs or swebhdfs as this
has different security and potentially performance implications. We have been running this
internally for a while and have found it useful for looking at usage patterns.
> Proposal is just to continue logging {{webhdfs}} as the proto for {{http}} WebHDFS commands,
but log {{swebhdfs}} for SWebHDFS (over {{https}}). This will be incompatible.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org

View raw message