[jira] [Commented] (HADOOP-14579) Add Kerberos and Delegation token support to ADLS client

["John Zhuge (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HADOOP-14579?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16061115#comment-16061115 ] 

John Zhuge commented on HADOOP-14579:
-------------------------------------

Thanks [~ankothap] and [~snayak] for the proposal. It'd be great to have this feature. Looking forward to the design doc/proposal because ADLS has different auth models than WASB.

> Add Kerberos and Delegation token support to ADLS client
> --------------------------------------------------------
>
>                 Key: HADOOP-14579
>                 URL: https://issues.apache.org/jira/browse/HADOOP-14579
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: fs/adl
>    Affects Versions: 2.8.0
>            Reporter: Anandsagar Kothapalli
>            Assignee: Santhosh G Nayak
>
> Current implementation of Azure storage client for Hadoop ({{ADLS}}) does not support Kerberos Authentication and FileSystem authorization, which makes it unusable in secure environments with multi user setup. 
> To make {{ADLS}} client more suitable to run in Secure environments, HADOOP-14565 is under way for providing the authorization and fine grained access control support.
> This JIRA is created to add Kerberos and delegation token support to {{ADLS}} client to fetch Azure Storage SAS keys, which provides fine grained timed access to containers and blobs. 
> For delegation token management, the proposal is it use the same REST service which being used to generate the SAS Keys.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org