[
https://issues.apache.org/jira/browse/HADOOP-15862?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16761025#comment-16761025
]
Steve Loughran commented on HADOOP-15862:
-----------------------------------------
HADOOP-16068 adds the basis for this;
I'm not planning to implement this feature in the near future though: it turned
out to get more and more complex to do. I'll let others pick this up
> ABFS to support a Delegation Token provider which marshalls current login
> secrets
> ---------------------------------------------------------------------------------
>
> Key: HADOOP-15862
> URL: https://issues.apache.org/jira/browse/HADOOP-15862
> Project: Hadoop Common
> Issue Type: Sub-task
> Components: fs/adl
> Affects Versions: 3.2.0
> Reporter: Steve Loughran
> Priority: Major
>
> ABFS has an extension point for generating delegation tokens, presumably the
> implementation is actually using Kerberos to generate some secrets to pass
> around.
> HADOOP-14556 shows how an object store can actually implement DTs which
> marshall full credentials over the wire to remote services, so allowing users
> to submit queries to shared clusters. This isn't as secure as kerberos, but
> does let users access their private data.
> (This JIRA is avoiding worrying about session & role auth, just taking the
> config options for login and marshalling as a DT)
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
