Hi - This list is generally for apache topics and not for distribution specific questions.
However, I can tell you that Apache Knox does not provide *all* of the security functions of any specific distribution. Hadoop itself has a security model of its own that is primarily based on kerberos which provides strong authentication for all entities in the system from clients to service components. You would have to dig into the specifics for each component to determine the various authorization mechanisms for the individual components. Knox specifically targets the security aspects for the REST APIs of the Hadoop cluster and can augment the authentication and authorization capabilities of the Hadoop cluster by adding integration capabilities beyond kerberos and the in-cluster mechanisms for authorization, etc. It is primarily a perimeter security solution for REST API access. Hope this is helpful to you. thanks for your interest! --larry On Thu, May 22, 2014 at 10:38 PM, 吴晓华 <[email protected]> wrote: > Hello: > I want to know whether the security functions(eg: authentication, > authorization, encryption,Etc) of HDP are all provided by Knox or not. If > not, what security functions are embedded in HDP. > thans! >
