[ 
https://issues.apache.org/jira/browse/MAPREDUCE-1026?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12758487#action_12758487
 ] 

Owen O'Malley commented on MAPREDUCE-1026:
------------------------------------------

Avro RPC won't have bulk data or authentication for a while, I suspect.

But the answer is yes, once there is authentication on the rpc, we can use 
that. In particular, the rpc will be able to use token/secret keys for 
authentication and that would be appropriate for this context. (Clearly a key 
exchange involving the kdc would never be performant enough for the shuffle.)

> Shuffle should be secure
> ------------------------
>
>                 Key: MAPREDUCE-1026
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1026
>             Project: Hadoop Map/Reduce
>          Issue Type: Improvement
>          Components: security
>            Reporter: Owen O'Malley
>            Assignee: Devaraj Das
>
> Since the user's data is available via http from the TaskTrackers, we should 
> require a job-specific secret to access it.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to