[
https://issues.apache.org/jira/browse/HDFS-13532?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16566108#comment-16566108
]
Ajay Kumar edited comment on HDFS-13532 at 8/1/18 10:38 PM:
------------------------------------------------------------
[~crh], i had a offline discussion with [~jnp], [~xyao] and [~arpitagarwal] on
this. If ServiceTicket is cached, Router will not be hammering KDC for each
request.
If other security experts in community believe that this will be an issue may
be we can tweak our approach 1 to mitigate this issue. Attached
[RBF-DelegationToken-Approach1b.pdf|https://issues.apache.org/jira/secure/attachment/12933984/RBF-DelegationToken-Approach1b.pdf]
to discuss an slightly modified approach.
was (Author: ajayydv):
[~crh], i had a offline discussion with [~jnp], [~xyao] and [~arpitagarwal] on
this. If ServiceTicket is cached, Router will not be hammering KDC for each
request.
If other security experts in community believe that this will be an issue may
be we can tweak our approach 1 to mitigate this issue. Attached [^RBF _
Security delegation token thoughts.pdf] to discuss an slightly modified
approach.
> RBF: Adding security
> --------------------
>
> Key: HDFS-13532
> URL: https://issues.apache.org/jira/browse/HDFS-13532
> Project: Hadoop HDFS
> Issue Type: New Feature
> Reporter: Íñigo Goiri
> Assignee: Sherwood Zheng
> Priority: Major
> Attachments: RBF _ Security delegation token thoughts.pdf,
> RBF-DelegationToken-Approach1b.pdf, Security_for_Router-based
> Federation_design_doc.pdf
>
>
> HDFS Router based federation should support security. This includes
> authentication and delegation tokens.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
