hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Varun Saxena (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (YARN-6638) [Security] Timeline reader side changes for loading auth filters and principals
Date Wed, 07 Jun 2017 22:14:19 GMT

    [ https://issues.apache.org/jira/browse/YARN-6638?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16041671#comment-16041671
] 

Varun Saxena edited comment on YARN-6638 at 6/7/17 10:13 PM:
-------------------------------------------------------------

For the time being, I had thought, for reader, merely Kerberos authentication should be enough.
So an authentication filter should also be enough.
But I load Timeline auth filter in the patch as we can possibly provide a REST endpoint in
future to get delegation token similar to what is done in RM. We would also need to address
token recovery as well then. If DT is not there in request though, filter will do kerberos
authentication anyways.

I do not think there is any immediate need for this endpoint to be provided though.


was (Author: varun_saxena):
For the time being, I had thought, for reader, merely Kerberos authentication should be enough.
So an authentication filter should also be enough.
But I load Timeline auth filter in the patch as we can possibly provide a REST endpoint in
future to get delegation token similar to what is done in RM. And if DT is not there, it will
do kerberos authentication anyways.

I do not think there is any immediate need for this endpoint to be provided though.

> [Security] Timeline reader side changes for loading auth filters and principals
> -------------------------------------------------------------------------------
>
>                 Key: YARN-6638
>                 URL: https://issues.apache.org/jira/browse/YARN-6638
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>          Components: timelineserver
>            Reporter: Varun Saxena
>            Assignee: Varun Saxena
>         Attachments: YARN-6638-YARN-5355.01.patch
>
>




--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org


Mime
View raw message