hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "He Xiaoqiao (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-13532) RBF: Adding security
Date Tue, 05 Mar 2019 18:07:04 GMT

    [ https://issues.apache.org/jira/browse/HDFS-13532?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16784726#comment-16784726

He Xiaoqiao commented on HDFS-13532:

Thanks [~brahmareddy] and [~elgoiri] for your detailed comments.
To [~elgoiri],
{quote}If the job is submitted against the Router, then the job can only access data through
However, I think this is OK; as I mentioned before you could still have jobs that query the
NameNodes directly.{quote}
IIUC, client/jobsubmitter and executors have to switch to RBF in the same time, otherwise,
delegation token check will not pass since they are not matching distributed from namenode
and router.
on another side, majority compute engine run on yarn rely on RM to renew token, So In on word,
it looks that there are no graceful solution to support rolling upgrade, for instance rolling
upgrade client to RBF, then YARN(RM/NM)?
{quote}For the RM itself, you can transition it from using RBF or not whenever you want.
As mentioned above, I am confused about RM using RBF or not. your more explains is greatly

To [~brahmareddy]
{quote}Did you try it..? do you've failed logs..?{quote}
I am sorry that no time to test this case now, I will offer more info in time when cover this

Thanks again.

> RBF: Adding security
> --------------------
>                 Key: HDFS-13532
>                 URL: https://issues.apache.org/jira/browse/HDFS-13532
>             Project: Hadoop HDFS
>          Issue Type: New Feature
>            Reporter: Íñigo Goiri
>            Assignee: CR Hota
>            Priority: Major
>         Attachments: RBF _ Security delegation token thoughts.pdf, RBF _ Security delegation
token thoughts_updated.pdf, RBF _ Security delegation token thoughts_updated_2.pdf, RBF-DelegationToken-Approach1b.pdf,
RBF_ Security delegation token thoughts_updated_3.pdf, Security_for_Router-based Federation_design_doc.pdf
> HDFS Router based federation should support security. This includes authentication and
delegation tokens.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org

View raw message