Mailing-List: contact mapreduce-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: mapreduce-issues@hadoop.apache.org
Date: Fri, 14 Oct 2011 22:16:12 +0000 (UTC)
From: "Owen O'Malley (Commented) (JIRA)" <jira@apache.org>
To: mapreduce-issues@hadoop.apache.org
Message-ID: 
 <1073822694.15809.1318630572906.JavaMail.tomcat@hel.zones.apache.org>
In-Reply-To: 
 <24984446.50730.1313704707621.JavaMail.tomcat@hel.zones.apache.org>
Subject: [jira] [Commented] (MAPREDUCE-2858) MRv2 WebApp Security
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/MAPREDUCE-2858?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13127912#comment-13127912 ] 

Owen O'Malley commented on MAPREDUCE-2858:
------------------------------------------

Luke, I would think that the urls should be http://proxyhost:proxyport/appmaster/$appid.

That way you can hold them stable if the AM is replaced by a new container.

Also, the proxy should be doing *NO* parsing or rewriting of the pages. The AM should generate urls that go through the proxy directly. Since everything is going through the proxy, there are no credentials that can be stolen by a malicious AM and thus you need no re-writing, signing of jars, etc.

That is a *MUCH* simpler model and provides the same level of security.
                
> MRv2 WebApp Security
> --------------------
>
>                 Key: MAPREDUCE-2858
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-2858
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>          Components: applicationmaster, mrv2, security
>    Affects Versions: 0.23.0
>            Reporter: Luke Lu
>            Assignee: Luke Lu
>            Priority: Blocker
>             Fix For: 0.23.0
>
>
> In MRv2, while the system servers (ResourceManager (RM), NodeManager (NM) and NameNode (NN)) run as "trusted"
> system users, the application masters (AM) run as users who submit the application. While this offers great flexibility
> to run multiple version of mapreduce frameworks (including their UI) on the same Hadoop cluster, it has significant
> implication for the security of webapps (Please do not discuss company specific vulnerabilities here).
> Requirements:
> # Secure authentication for AM (for app/job level ACLs).
> # Webapp security should be optional via site configuration.
> # Support existing pluggable single sign on mechanisms.
> # Should not require per app/user configuration for deployment.
> # Should not require special site-wide DNS configuration for deployment.
> This the top jira for webapp security. A design doc/notes of threat-modeling and counter measures will be posted on the wiki.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira