Return-Path: X-Original-To: apmail-hadoop-mapreduce-user-archive@minotaur.apache.org Delivered-To: apmail-hadoop-mapreduce-user-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 1AFE1E8C2 for ; Tue, 26 Feb 2013 23:34:53 +0000 (UTC) Received: (qmail 60670 invoked by uid 500); 26 Feb 2013 23:34:48 -0000 Delivered-To: apmail-hadoop-mapreduce-user-archive@hadoop.apache.org Received: (qmail 60577 invoked by uid 500); 26 Feb 2013 23:34:48 -0000 Mailing-List: contact user-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@hadoop.apache.org Delivered-To: mailing list user@hadoop.apache.org Received: (qmail 60569 invoked by uid 99); 26 Feb 2013 23:34:48 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 26 Feb 2013 23:34:48 +0000 X-ASF-Spam-Status: No, hits=1.5 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of hadoop.ca@gmail.com designates 209.85.128.47 as permitted sender) Received: from [209.85.128.47] (HELO mail-qe0-f47.google.com) (209.85.128.47) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 26 Feb 2013 23:34:42 +0000 Received: by mail-qe0-f47.google.com with SMTP id q19so858456qeb.6 for ; Tue, 26 Feb 2013 15:34:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:content-type; bh=g+vZ+w3nnNWPnDha5NyKaV+4SMkrJ8BfZRJSb63Glok=; b=V4N+T85W4UbjB+9/nWkIl0vP6kJm1ISovkZJLafyBgyt0QzS1+ednOW8UKmE7Q934D KzxPgNkToriPIHRoy6QjlJN1kN7hpguBBUMdFKEobZ+W3m4dbBR6hY2RVEZTQeypOOAi q38vdh5LorZ0qogfuXUtYjpWJkiyUbSmlm1c9O9lx9pZnZbV1JWfpAkScvoAZqLskSOZ aDdVU7GLPeiDKFsyS0BC0NBQNikn4Tu8UnN0ef5Znm1Y0e7Zq1gJlhVULvJDh8KYAsp2 vpKlVkK53+D+7OgQQcg8b7DTBAQkvW+U6MZmM+731CMjI0i8z5tHwx/Eb1jZ/wChpBUW +dSw== MIME-Version: 1.0 X-Received: by 10.49.132.199 with SMTP id ow7mr89121qeb.56.1361921661428; Tue, 26 Feb 2013 15:34:21 -0800 (PST) Received: by 10.49.49.234 with HTTP; Tue, 26 Feb 2013 15:34:21 -0800 (PST) In-Reply-To: References: Date: Tue, 26 Feb 2013 15:34:21 -0800 Message-ID: Subject: Re: JobTracker security From: Serge Blazhievsky To: user@hadoop.apache.org Content-Type: multipart/alternative; boundary=047d7bf164aed785ea04d6a918bf X-Virus-Checked: Checked by ClamAV on apache.org --047d7bf164aed785ea04d6a918bf Content-Type: text/plain; charset=ISO-8859-1 I am trying to not to use kerberos... Is there other option? Thanks Serge On Tue, Feb 26, 2013 at 3:31 PM, Patai Sangbutsarakum < Patai.Sangbutsarakum@turn.com> wrote: > Kerberos > > From: Serge Blazhievsky > Reply-To: > Date: Tue, 26 Feb 2013 15:29:08 -0800 > To: > Subject: JobTracker security > > Hi all, > > Is there a way to restrict job monitoring and management only to jobs > started by each individual user? > > > The basic scenario is: > > 1. Start a job under user1 > 2. Login as user2 > 3. hadoop job -list to retrieve job id > 4. hadoop job -kill job_id > 5. Job gets terminated.... > > Is there something that needs to be enabled to prevent that from > happening? > > Thanks > Serge > --047d7bf164aed785ea04d6a918bf Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable I am trying to not to use kerberos...=A0

Is there other = option?

Thanks
Serge

On Tue, Feb 26, 2013 at 3:31 PM, Patai Sangbutsarakum <Patai.Sangbutsarakum@turn.com> wrote:
Kerberos

From: Serge Blazhievsky <hadoop.ca@gmail.com&g= t;
Reply-To: <user@hadoop.apache.org>
Date: Tue, 26 Feb 2013 15:29:08 -08= 00
To: <user@hadoop.apache.org>
Subject: JobTracker security

Hi all,

Is there a way to restrict job monitoring and management only to jobs = started by each individual user?


The basic scenario is:

1. Start a job under user1
2. Login as user2=A0
3. hadoop job -list to retrieve job id
4. hadoop job -kill job_id
5. Job gets terminated....=A0

Is there something that needs to be enabled to prevent that from happe= ning?

Thanks
Serge

--047d7bf164aed785ea04d6a918bf--