Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 04581200497 for ; Wed, 23 Aug 2017 17:54:05 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 02D75169094; Wed, 23 Aug 2017 15:54:05 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 49C6B16908B for ; Wed, 23 Aug 2017 17:54:04 +0200 (CEST) Received: (qmail 29864 invoked by uid 500); 23 Aug 2017 15:54:02 -0000 Mailing-List: contact hdfs-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list hdfs-issues@hadoop.apache.org Received: (qmail 29853 invoked by uid 99); 23 Aug 2017 15:54:02 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 23 Aug 2017 15:54:02 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 50D22180582 for ; Wed, 23 Aug 2017 15:54:02 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -100.002 X-Spam-Level: X-Spam-Status: No, score=-100.002 tagged_above=-999 required=6.31 tests=[RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=disabled Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id O1X3mOoIyI5h for ; Wed, 23 Aug 2017 15:54:01 +0000 (UTC) Received: from mailrelay1-us-west.apache.org (mailrelay1-us-west.apache.org [209.188.14.139]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTP id 6178B5FD6F for ; Wed, 23 Aug 2017 15:54:01 +0000 (UTC) Received: from jira-lw-us.apache.org (unknown [207.244.88.139]) by mailrelay1-us-west.apache.org (ASF Mail Server at mailrelay1-us-west.apache.org) with ESMTP id B5F5AE0AF9 for ; Wed, 23 Aug 2017 15:54:00 +0000 (UTC) Received: from jira-lw-us.apache.org (localhost [127.0.0.1]) by jira-lw-us.apache.org (ASF Mail Server at jira-lw-us.apache.org) with ESMTP id 15BF425381 for ; Wed, 23 Aug 2017 15:54:00 +0000 (UTC) Date: Wed, 23 Aug 2017 15:54:00 +0000 (UTC) From: "Erik Krogen (JIRA)" To: hdfs-issues@hadoop.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (HDFS-12342) Differentiate webhdfs vs. swebhdfs calls in audit log MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Wed, 23 Aug 2017 15:54:05 -0000 [ https://issues.apache.org/jira/browse/HDFS-12342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16138530#comment-16138530 ] Erik Krogen commented on HDFS-12342: ------------------------------------ Ping [~aw] (I feel you may have thoughts on this) and [~andrew.wang] for a Cloudera opinion. > Differentiate webhdfs vs. swebhdfs calls in audit log > ----------------------------------------------------- > > Key: HDFS-12342 > URL: https://issues.apache.org/jira/browse/HDFS-12342 > Project: Hadoop HDFS > Issue Type: Improvement > Components: logging > Reporter: Erik Krogen > Assignee: Erik Krogen > Labels: Incompatible > > Currently the audit log only logs {{webhdfs}} vs {{rpc}} as the {{proto}}. It is useful to be able to audit whether certain commands were carried out via webhdfs or swebhdfs as this has different security and potentially performance implications. We have been running this internally for a while and have found it useful for looking at usage patterns. > Proposal is just to continue logging {{webhdfs}} as the proto for {{http}} WebHDFS commands, but log {{swebhdfs}} for SWebHDFS (over {{https}}). This will be incompatible. -- This message was sent by Atlassian JIRA (v6.4.14#64029) --------------------------------------------------------------------- To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org