hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Josh Elser (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-19118) Use SaslUtil to set Sasl.QOP in 'Thrift'
Date Tue, 31 Oct 2017 04:04:00 GMT

    [ https://issues.apache.org/jira/browse/HBASE-19118?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16226211#comment-16226211
] 

Josh Elser commented on HBASE-19118:
------------------------------------

Ahh, sorry about that. I see that on second glance. I was mislead by the following :)

{noformat}
+      if (qop != QualityOfProtection.AUTHENTICATION &&
+          qop != QualityOfProtection.INTEGRITY &&
+          qop != QualityOfProtection.PRIVACY) {
{noformat}

bq.  I'm not sure there's a unit test for kerberized thrift server, but i'm sure there's an
example DemoClient in hbase-example which i'm using as a test.

A shame if we don't have one :(. You've tested by hand with the old and new properties successfully?

> Use SaslUtil to set Sasl.QOP in 'Thrift'
> ----------------------------------------
>
>                 Key: HBASE-19118
>                 URL: https://issues.apache.org/jira/browse/HBASE-19118
>             Project: HBase
>          Issue Type: Bug
>          Components: Thrift
>    Affects Versions: 1.2.6
>            Reporter: Reid Chan
>            Assignee: Reid Chan
>         Attachments: HBASE-19118.master.001.patch, HBASE-19118.master.002.patch, HBASE-19118.master.003.patch
>
>
> In [Configure the Thrift Gateway|http://hbase.apache.org/book.html#security.client.thrift],
it says "set the property {{hbase.thrift.security.qop}} to one of the following three values:
{{privacy}}, {{integrity}}, {{authentication}}", which would lead to failure of starting up
a thrift server.
> In fact, the value of {{hbase.thrift.security.qop}} should be {{auth}}, {{auth-int}},
{{auth-conf}}, according to the documentation of {{Sasl.QOP}}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message