hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Mingliang Liu (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-12342) Differentiate webhdfs vs. swebhdfs calls in audit log
Date Sun, 27 Aug 2017 23:14:00 GMT

    [ https://issues.apache.org/jira/browse/HDFS-12342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16143252#comment-16143252

Mingliang Liu commented on HDFS-12342:

I am +1 on the idea but would like to understand different opinions. Thanks,

> Differentiate webhdfs vs. swebhdfs calls in audit log
> -----------------------------------------------------
>                 Key: HDFS-12342
>                 URL: https://issues.apache.org/jira/browse/HDFS-12342
>             Project: Hadoop HDFS
>          Issue Type: Improvement
>          Components: logging
>            Reporter: Erik Krogen
>            Assignee: Erik Krogen
>              Labels: Incompatible
> Currently the audit log only logs {{webhdfs}} vs {{rpc}} as the {{proto}}. It is useful
to be able to audit whether certain commands were carried out via webhdfs or swebhdfs as this
has different security and potentially performance implications. We have been running this
internally for a while and have found it useful for looking at usage patterns.
> Proposal is just to continue logging {{webhdfs}} as the proto for {{http}} WebHDFS commands,
but log {{swebhdfs}} for SWebHDFS (over {{https}}). This will be incompatible.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org

View raw message