Return-Path: X-Original-To: apmail-knox-dev-archive@minotaur.apache.org Delivered-To: apmail-knox-dev-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id BACFECF11 for ; Wed, 12 Mar 2014 19:51:13 +0000 (UTC) Received: (qmail 67769 invoked by uid 500); 12 Mar 2014 19:51:12 -0000 Delivered-To: apmail-knox-dev-archive@knox.apache.org Received: (qmail 67709 invoked by uid 500); 12 Mar 2014 19:51:08 -0000 Mailing-List: contact dev-help@knox.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@knox.apache.org Delivered-To: mailing list dev@knox.apache.org Received: (qmail 67701 invoked by uid 99); 12 Mar 2014 19:51:07 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 12 Mar 2014 19:51:07 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=5.0 tests=ALL_TRUSTED,T_RP_MATCHES_RCVD X-Spam-Check-By: apache.org Received: from [140.211.11.3] (HELO mail.apache.org) (140.211.11.3) by apache.org (qpsmtpd/0.29) with SMTP; Wed, 12 Mar 2014 19:51:06 +0000 Received: (qmail 66102 invoked by uid 99); 12 Mar 2014 19:50:46 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 12 Mar 2014 19:50:46 +0000 Date: Wed, 12 Mar 2014 19:50:46 +0000 (UTC) From: "Ed Kohlwey (JIRA)" To: dev@knox.incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (KNOX-250) SSH Bastion Auditing Functionality MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/KNOX-250?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13932268#comment-13932268 ] Ed Kohlwey commented on KNOX-250: --------------------------------- I've started some initial work on this here: https://github.com/ekohlwey/knox/tree/KNOX-250 > SSH Bastion Auditing Functionality > ---------------------------------- > > Key: KNOX-250 > URL: https://issues.apache.org/jira/browse/KNOX-250 > Project: Apache Knox > Issue Type: New Feature > Reporter: Ed Kohlwey > > It would be nice for Knox to provide SSH tunneling and auditing functionality in addition to the rest gateway services it provides. This would help Knox be a single-stop for cluster audit logging requirements. > Larry McCay provided the following design guidance via the mailing list related to an implementation: > * Apache Mina SSHD Knox Provider (providers are great for introducing > configuration, filters, listeners, etc.) > * Each topology (which represents a managed Hadoop cluster) may configure > an optional sshd-provider > * The sshd-provider would likely require a ShellFactory that sets up a > tunneling client into the target cluster (perhaps with the sshd client > component) > * The sshd-provider ShellFactory would need to resolve the appropriate > Hadoop client configuration for it's intended Hadoop cluster > * The sshd-provider would expose a separate ssh port per cluster for users > to connect to -- This message was sent by Atlassian JIRA (v6.2#6252)