[ 
https://issues.apache.org/jira/browse/HADOOP-4490?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12653327#action_12653327
 ] 

Hemanth Yamijala commented on HADOOP-4490:
------------------------------------------

Steve, I do agree that the security manager approach is simpler and portable. 
However, I think the requirement is also to support features like streaming. 
Given that, I think the security manager approach would not work. Am I right ?

Also, I agree that authentication and authorization is a pre-requisite for 
this. It is being handled by the other tasks under the jira HADOOP-4487. Here, 
I am focussing only on the mechanisms to make tasks run as the users who 
submitted the jobs - a small part of the larger framework.

> Map and Reduce tasks should run as the user who submitted the job
> -----------------------------------------------------------------
>
>                 Key: HADOOP-4490
>                 URL: https://issues.apache.org/jira/browse/HADOOP-4490
>             Project: Hadoop Core
>          Issue Type: Sub-task
>          Components: mapred, security
>            Reporter: Arun C Murthy
>            Assignee: Hemanth Yamijala
>
> Currently the TaskTracker spawns the map/reduce tasks, resulting in them 
> running as the user who started the TaskTracker.
> For security and accounting purposes the tasks should be run as the job-owner.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to