[
https://issues.apache.org/jira/browse/HAWQ-1436?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15983362#comment-15983362
]
Alexander Denissov commented on HAWQ-1436:
------------------------------------------
One issue with "localhost" value for the rps_host is that when RPS will be
SSL-enabled, it will have a certificate, ideally issued for the FQDN of the
host and this certificate will be imported into HAWQ SSL trust store (or
whatever analogy HAWQ is using to store a list of trusted certificates). When
SSL connection is established, SSL will verify that the certificate presented
by the server contains the host name where the connection is being established
to, so HAWQ code would need to translate "localhost" to its own FQDN or employ
a similar logic to pass SSL certification validation.
> Implement RPS High availability on HAWQ
> ---------------------------------------
>
> Key: HAWQ-1436
> URL: https://issues.apache.org/jira/browse/HAWQ-1436
> Project: Apache HAWQ
> Issue Type: Sub-task
> Components: Security
> Reporter: Hongxu Ma
> Assignee: Hongxu Ma
> Fix For: backlog
>
> Attachments: RPSHADesign_v0.1.pdf
>
>
> Once Ranger is configured, HAWQ will rely on RPS to connect to Ranger. A
> single point RPS may influence the robustness of HAWQ.
> Thus We need to investigate and design out the way to implement RPS High
> availability.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
