hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Takanobu Asanuma (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HDFS-13654) Use a random secret when a secret file doesn't exist in HttpFS. This should be default.
Date Tue, 03 Jul 2018 06:49:00 GMT

     [ https://issues.apache.org/jira/browse/HDFS-13654?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Takanobu Asanuma updated HDFS-13654:
------------------------------------
    Summary: Use a random secret when a secret file doesn't  exist in HttpFS. This should
be default.  (was: The default secret signature for httpfs is "hadoop httpfs secret", This
should be a random string for better security. )

> Use a random secret when a secret file doesn't  exist in HttpFS. This should be default.
> ----------------------------------------------------------------------------------------
>
>                 Key: HDFS-13654
>                 URL: https://issues.apache.org/jira/browse/HDFS-13654
>             Project: Hadoop HDFS
>          Issue Type: Improvement
>          Components: httpfs, security
>            Reporter: Pulkit Bhardwaj
>            Assignee: Takanobu Asanuma
>            Priority: Major
>         Attachments: HDFS-13654.1.patch, HDFS-13654.2.patch, HDFS-13654.3.patch
>
>
> {code:java}
> curl -s https://raw.githubusercontent.com/apache/hadoop/trunk/hadoop-hdfs-project/hadoop-hdfs-httpfs/src/main/conf/httpfs-signature.secret 
> hadoop httpfs secret{code}
>  
> The "secret" is a known string, it is better to keep this a random string so that it
is not well known.
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org


Mime
View raw message