[ 
https://issues.apache.org/jira/browse/SLIDER-556?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14183846#comment-14183846
 ] 

Jonathan Maron commented on SLIDER-556:
---------------------------------------

the property is disregarded (or, more accurately, ACL/authorization checks are 
disabled) if hadoop.security.authorization is set to false (default value).  
Additionally, the wildcard value is an "allow everyone" policy even if 
authorization is enabled.  See org.apache.hadoop.ipc.Server for reference.

> Some slider-client.xml cleanup/enhancement related to security
> --------------------------------------------------------------
>
>                 Key: SLIDER-556
>                 URL: https://issues.apache.org/jira/browse/SLIDER-556
>             Project: Slider
>          Issue Type: Bug
>            Reporter: Jonathan Maron
>            Assignee: Sumit Mohanty
>             Fix For: Slider 0.60
>
>
> We should add a sample setting to the installed slider-client.xml for 
> security.slider.protocol.acl:
>   <property>
>     <name>security.slider.protocol.acl</name>
>     <value>*</value>
>   </property>
> We should add a description that makes it clear that, in a secure cluster 
> with authorization enabled, an acl must be specified.
> In addition, remove the slider.security.enabled setting - that setting is now 
> set by the AM based on cluster security status.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to