Return-Path: X-Original-To: apmail-hbase-dev-archive@www.apache.org Delivered-To: apmail-hbase-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id BDE40776F for ; Thu, 17 Nov 2011 21:38:37 +0000 (UTC) Received: (qmail 26680 invoked by uid 500); 17 Nov 2011 21:38:37 -0000 Delivered-To: apmail-hbase-dev-archive@hbase.apache.org Received: (qmail 26640 invoked by uid 500); 17 Nov 2011 21:38:37 -0000 Mailing-List: contact dev-help@hbase.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@hbase.apache.org Delivered-To: mailing list dev@hbase.apache.org Received: (qmail 26632 invoked by uid 99); 17 Nov 2011 21:38:37 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 17 Nov 2011 21:38:37 +0000 X-ASF-Spam-Status: No, hits=1.5 required=5.0 tests=FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of yuzhihong@gmail.com designates 209.85.215.169 as permitted sender) Received: from [209.85.215.169] (HELO mail-ey0-f169.google.com) (209.85.215.169) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 17 Nov 2011 21:38:30 +0000 Received: by eye4 with SMTP id 4so3324718eye.14 for ; Thu, 17 Nov 2011 13:38:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=Sc5tSJMlOujxiozvKWancElKKKAE+7kJHlqsaKgaTTY=; b=Zo8IQKVJV3UFsEbPLu9tnC/2uoFxmRPLJeRY4m6HzoFYcFpIB/YZMl+u9i1hIr23Y4 KrqsklQ0r4w/qJDiE3vpXjEoP/509b0yCUjiT2s9PM0oh/k5wg8qCRCVkvLF1QsVma88 bMhfzIu5Mm1xRxyPpwni0+j6oLn/RmJ5yzUQA= MIME-Version: 1.0 Received: by 10.180.105.102 with SMTP id gl6mr306135wib.46.1321565889952; Thu, 17 Nov 2011 13:38:09 -0800 (PST) Received: by 10.216.45.78 with HTTP; Thu, 17 Nov 2011 13:38:09 -0800 (PST) In-Reply-To: <1321565504.20571.YahooMailNeo@web65505.mail.ac4.yahoo.com> References: <1321565504.20571.YahooMailNeo@web65505.mail.ac4.yahoo.com> Date: Thu, 17 Nov 2011 13:38:09 -0800 Message-ID: Subject: Re: Security patches: HBASE-2742 and HBASE-3025 From: Ted Yu To: dev@hbase.apache.org, Andrew Purtell Content-Type: multipart/alternative; boundary=f46d04426dd46afba404b1f509fe X-Virus-Checked: Checked by ClamAV on apache.org --f46d04426dd46afba404b1f509fe Content-Type: text/plain; charset=ISO-8859-1 My assumption is that 0.92 RC0 would be released after: 1. 2742 and 3025 get checked in 2. we have a good Jenkins build after that We can iron out build issues between #1 and #2 above. HadoopQA would make this easier by telling us which tests may fail. This is my personal opinion. On Thu, Nov 17, 2011 at 1:31 PM, Andrew Purtell wrote: > Hi Ted, > > Integration of security is holding up an 0.92 RC. > > I'd like clean Hudson reports too, but that seems thin justification. > > Best regards, > > > - Andy > > Problems worthy of attack prove their worth by hitting back. - Piet Hein > (via Tom White) > > > ----- Original Message ----- > > From: Ted Yu > > To: dev@hbase.apache.org > > Cc: > > Sent: Thursday, November 17, 2011 10:58 AM > > Subject: Re: Security patches: HBASE-2742 and HBASE-3025 > > > > I am still going over changes in 2742. But I don't expect to find much. > > > > 2742 and 3025 haven't gone through HadoopQA yet. > > 0.92 and TRUNK builds on Jenkins have been unstable lately. I think we > > shouldn't make a successful build further. > > > > Cheers > > > > On Thu, Nov 17, 2011 at 10:47 AM, Gary Helmling > > wrote: > > > >> Yes, the ZK authentication in 2418 is the final piece of the puzzle. > >> > >> > >> On Thu, Nov 17, 2011 at 10:44 AM, Stack wrote: > >> > On Thu, Nov 17, 2011 at 10:33 AM, Gary Helmling > > > >> wrote: > >> >> Hi all, > >> >> > >> >> I intend to commit the following patches for HBase security to the > >> >> 0.92 branch and trunk at the end of day today: > >> >> > >> >> HBASE-2742: Provide a secure RPC engine for HBase > >> >> https://reviews.apache.org/r/1991/ > >> >> > >> >> HBASE-3025: Coprocessor based simple access control > >> >> https://reviews.apache.org/r/2041/ > >> >> > >> >> If you have not reviewed and want to, or feel like you need more > > time, > >> >> please take a look today or speak up now. > >> >> > >> > > >> > Am reviewing now. > >> > > >> > That would leave Andrew's secure zk issue to complete our security > > story? > >> > > >> > St.Ack > >> > > >> > > > --f46d04426dd46afba404b1f509fe--