hadoop-mapreduce-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Owen O'Malley (JIRA)" <j...@apache.org>
Subject [jira] Commented: (MAPREDUCE-1026) Shuffle should be secure
Date Tue, 22 Sep 2009 23:28:16 GMT

    [ https://issues.apache.org/jira/browse/MAPREDUCE-1026?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12758487#action_12758487
] 

Owen O'Malley commented on MAPREDUCE-1026:
------------------------------------------

Avro RPC won't have bulk data or authentication for a while, I suspect.

But the answer is yes, once there is authentication on the rpc, we can use that. In particular,
the rpc will be able to use token/secret keys for authentication and that would be appropriate
for this context. (Clearly a key exchange involving the kdc would never be performant enough
for the shuffle.)

> Shuffle should be secure
> ------------------------
>
>                 Key: MAPREDUCE-1026
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1026
>             Project: Hadoop Map/Reduce
>          Issue Type: Improvement
>          Components: security
>            Reporter: Owen O'Malley
>            Assignee: Devaraj Das
>
> Since the user's data is available via http from the TaskTrackers, we should require
a job-specific secret to access it.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message