[ 
https://issues.apache.org/jira/browse/HADOOP-10427?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13958529#comment-13958529
 ] 

Alejandro Abdelnur commented on HADOOP-10427:
---------------------------------------------

Thread safety is needed regardless of KMS server, in case a client is doing 
multithreaded stuff.

Agree that the JavaKeyStoreProvider is not the ideal backend for the KMS 
server. Currently is the only thing we have in Hadoop. 

The KMS server simply uses the KeyProvider API, so you could plugin any impl 
there, potentially one talking with a KMIP server.

The KMS server does not attempt to provide a reliable store, just a 
client/server implementation deferring to another implementation.

Sounds reasonable? 



> KeyProvider implementations should be thread safe
> -------------------------------------------------
>
>                 Key: HADOOP-10427
>                 URL: https://issues.apache.org/jira/browse/HADOOP-10427
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 3.0.0
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>         Attachments: HADOOP-10427.patch, HADOOP-10427.patch
>
>
> The {{KeyProvider}} API should be thread-safe so it can be used safely in 
> server apps.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to