[
https://issues.apache.org/jira/browse/HADOOP-9421?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13662244#comment-13662244
]
Luke Lu commented on HADOOP-9421:
---------------------------------
I can see why you want to couple SASL with regular RPC. OTOH, SASL seems to map
better to per connection auth instead of per call auth. With SASL in a separate
phase, you can demand (via the SASL phase) a (abstract) capability token that
works across multiple related RPC calls in the same connection. You can simply
throw regular RPC authorization exception later, in case the call is not
covered by the token.
Intertwining regular RPC and SASL seems to make the implementation (and future
enhancement) more complicated instead of simpler.
> Convert SASL to use ProtoBuf and add lengths for non-blocking processing
> ------------------------------------------------------------------------
>
> Key: HADOOP-9421
> URL: https://issues.apache.org/jira/browse/HADOOP-9421
> Project: Hadoop Common
> Issue Type: Sub-task
> Affects Versions: 2.0.3-alpha
> Reporter: Sanjay Radia
> Assignee: Junping Du
> Attachments: HADOOP-9421.patch, HADOOP-9421-v2-demo.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
