Mailing-List: contact user-help@hbase.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@hbase.apache.org
Received-SPF: pass (athena.apache.org: domain of asaf.mesika@gmail.com
 designates 209.85.214.174 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CA+r7Yvky1LzAfv=EQWSF7jbDHLvCsLUr9Hw5UOOTP6wERh4uJQ@mail.gmail.com>
References: 
 <CA+r7YvmK=4vC+92GE6K61o8YzPBXM4VZ0VHP5MrCuhQY8m14JQ@mail.gmail.com>
	<CAAT7MkpSv2spvhNq1oXrLmbKUgmSehAD7bA10H94u2W4hTkMOg@mail.gmail.com>
	<CA+r7YvkkQmtBO75Ux26sggSFQmuipNCs9bx9ZrXxJRxaSb3jhQ@mail.gmail.com>
	<CA+RK=_CS__yYf97ozbAV6DSAEs5qxx+_GQpBemYOeGixd7opvQ@mail.gmail.com>
	<CA+r7Yvky1LzAfv=EQWSF7jbDHLvCsLUr9Hw5UOOTP6wERh4uJQ@mail.gmail.com>
Date: Mon, 20 May 2013 11:09:44 +0300
Message-ID: 
 <CA+r7YvkF8=E5-ocezY5T_=+t8vYuZ5Xs-tBjAf+J5M7aVeU9uw@mail.gmail.com>
Subject: Re: Secure HBase upon Replication
From: Asaf Mesika <asaf.mesika@gmail.com>
To: "user@hbase.apache.org" <user@hbase.apache.org>
Content-Type: multipart/alternative; boundary=047d7b471d9c05505904dd21db85

--047d7b471d9c05505904dd21db85
Content-Type: text/plain; charset=UTF-8

Just pinging the question, in case anyone missed it...
(No answers were found in the resources I've searched for, so before diving
into the code...)

Thanks!


On Fri, May 10, 2013 at 12:50 AM, Asaf Mesika <asaf.mesika@gmail.com> wrote:

> Thank you for the detailed answer.
> Regarding my 1st question - RPC for replication between master and slave
> region servers is secured the same as RPC between region servers in the
> same clusters? Is there a mechanism for exchanging keys between the master
> and slave clusters?
>
>
> On Thursday, May 9, 2013, Andrew Purtell wrote:
>
>> There is no separate branch for security features, they are integrated in
>> 0.92 and 0.94. We did partition the security sources into a separate Maven
>> module for 0.92 and 0.94, out of an abundance of caution during
>> development
>> of security features. (Some versions of Hadoop, e.g. 0.20, don't have the
>> necessary APIs, so compiling HBase against such old versions will fail if
>> security sources are included in the build.) That forces the production of
>> those -security artifacts because of Maven being Maven. A -security
>> artifact contains all of 0.94 plus:
>>     - A secure RPC engine, for integrating with Hadoop security / Kerberos
>>     - The AccessController coprocessor
>>     - The TokenProvider coprocessor
>>
>> From 0.95 and forward there won't be separate security artifacts.
>>
>>
>> On Thu, May 9, 2013 at 5:36 PM, Asaf Mesika <asaf.mesika@gmail.com>
>> wrote:
>>
>> > On Thu, May 9, 2013 at 11:43 AM, ramkrishna vasudevan <
>> > ramkrishna.s.vasudevan@gmail.com> wrote:
>> >
>> > > >>Does enabling security in HBase entails using the latest hbase
>> security
>> > > >>branch?
>> > > Which branch are you using?  Once you enable security the security
>> > feature
>> > > on that branch starts working.
>> > >
>> > If security is a feature, why HBase are releasing two version each time.
>> > For instance 0.94.7 and 0.94.7-security?
>> >
>> >
>> > > >>3. Suppose the only requirement I have is securing the RPC in
>> between
>> > > >>Master and Slave sites, do I must have Secure HDFS and secure
>> > ZooKeeper?
>> > > Security if enabled will apply to HDFS and Zookeeper also.  I don't
>> think
>> > > you can only enable for HBase alone.
>> > >
>> > Thus I need to have special versions of HDFS and ZooKeeper as well, or
>> > security is already baked in as a feature in Hadoop 1.0.4 (for example)
>> ?
>> >
>> > >
>> > > >>1. Does HBase supports secure RPC between Master and Slave
>> > replications?
>> > > Sorry am not sure on this.
>> > >
>> > > Regards
>> > > Ram
>> > >
>> > >
>> > > On Thu, May 9, 2013 at 2:04 PM, Asaf Mesika <asaf.mesika@gmail.com>
>> > wrote:
>> > >
>> > > > Hi,
>> > > >
>> > > > I know that HBase supports secure RPC between its nodes (Master,
>> Region
>> > > > Server). I have couple of questions about it:
>> > > >
>> > > > 1. Does HBase supports secure RPC between Master and Slave
>> > replications?
>> > > > 2. Does enabling security in HBase entails using the latest hbase
>> > > security
>> > > > branch?
>> > > > 3. Suppose the only requirement I have is securing the RPC in
>> between
>> > > > Master and Slave sites, do I must have Secure HDFS and secure
>> > ZooKeeper?
>> > > >
>> > > > Thank you,
>> > > >
>> > > > Asaf
>> > > >
>> > >
>> >
>>
>>
>>
>> --
>> Best regards,
>>
>>    - Andy
>>
>> Problems worthy of attack prove their worth by hitting back. - Piet Hein
>> (via Tom White)
>>
>

--047d7b471d9c05505904dd21db85--