Return-Path: X-Original-To: apmail-hbase-issues-archive@www.apache.org Delivered-To: apmail-hbase-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 7C396172A4 for ; Wed, 16 Sep 2015 05:18:46 +0000 (UTC) Received: (qmail 87065 invoked by uid 500); 16 Sep 2015 05:18:46 -0000 Delivered-To: apmail-hbase-issues-archive@hbase.apache.org Received: (qmail 87012 invoked by uid 500); 16 Sep 2015 05:18:46 -0000 Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list issues@hbase.apache.org Received: (qmail 86995 invoked by uid 99); 16 Sep 2015 05:18:46 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 16 Sep 2015 05:18:46 +0000 Date: Wed, 16 Sep 2015 05:18:46 +0000 (UTC) From: "Hudson (JIRA)" To: issues@hbase.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (HBASE-14400) Fix HBase RPC protection documentation MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HBASE-14400?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14746888#comment-14746888 ] Hudson commented on HBASE-14400: -------------------------------- SUCCESS: Integrated in HBase-1.2-IT #149 (See [https://builds.apache.org/job/HBase-1.2-IT/149/]) HBASE-14400 Fix HBase RPC protection documentation (apurtell: rev 956d4d9ca6ed46f33b67b0f981af05fb8d6e0111) * src/main/asciidoc/_chapters/security.adoc * hbase-client/src/main/java/org/apache/hadoop/hbase/security/SaslClientHandler.java * hbase-thrift/src/main/java/org/apache/hadoop/hbase/thrift2/ThriftServer.java * hbase-client/src/main/java/org/apache/hadoop/hbase/security/SaslUtil.java * hbase-server/src/test/java/org/apache/hadoop/hbase/security/TestHBaseSaslRpcClient.java > Fix HBase RPC protection documentation > -------------------------------------- > > Key: HBASE-14400 > URL: https://issues.apache.org/jira/browse/HBASE-14400 > Project: HBase > Issue Type: Bug > Components: encryption, rpc, security > Reporter: Apekshit Sharma > Assignee: Apekshit Sharma > Priority: Critical > Fix For: 2.0.0, 1.2.0, 1.3.0, 0.98.15, 1.0.3, 1.1.3 > > Attachments: HBASE-14400-branch-0.98.patch, HBASE-14400-branch-1.0.patch, HBASE-14400-branch-1.1.patch, HBASE-14400-branch-1.2.patch, HBASE-14400-master-v2.patch, HBASE-14400-master.patch > > > HBase configuration 'hbase.rpc.protection' can be set to 'authentication', 'integrity' or 'privacy'. > "authentication means authentication only and no integrity or privacy; integrity implies > authentication and integrity are enabled; and privacy implies all of > authentication, integrity and privacy are enabled." > However hbase ref guide incorrectly suggests in some places to set the value to 'auth-conf' instead of 'privacy'. Setting value to 'auth-conf' doesn't provide rpc encryption which is what user wants. > This jira will fix: > - documentation: change 'auth-conf' references to 'privacy' > - SaslUtil to support both set of values (privacy/integrity/authentication and auth-conf/auth-int/auth) to be backward compatible with what was being suggested till now. > - change 'hbase.thrift.security.qop' to be consistent with other similar configurations by using same set of values (privacy/integrity/authentication). -- This message was sent by Atlassian JIRA (v6.3.4#6332)