You are viewing a plain text version of this content. The canonical link for it is here.
Posted to mapreduce-issues@hadoop.apache.org by "Vinod Kumar Vavilapalli (JIRA)" <ji...@apache.org> on 2011/07/29 05:54:09 UTC

[jira] [Created] (MAPREDUCE-2744) [MR-279] In unsercure mode, AM can fake resource requirements

[MR-279] In unsercure mode, AM can fake resource requirements 
--------------------------------------------------------------

                 Key: MAPREDUCE-2744
                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-2744
             Project: Hadoop Map/Reduce
          Issue Type: Bug
          Components: mrv2
            Reporter: Vinod Kumar Vavilapalli
             Fix For: 0.23.0


Without security, it is impossible to completely avoid AMs faking resources. We can at the least make it as difficult as possible by using the same container tokens and the RM-NM shared key mechanism over unauthenticated RM-NM channel.

In the minimum, this will avoid accidental bugs in AMs in unsecure mode.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (MAPREDUCE-2744) [MR-279] In unsercure mode, AM can fake resource requirements

Posted by "Vinod Kumar Vavilapalli (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/MAPREDUCE-2744?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vinod Kumar Vavilapalli updated MAPREDUCE-2744:
-----------------------------------------------

          Component/s: security
    Affects Version/s: 0.23.0
    
> [MR-279] In unsercure mode, AM can fake resource requirements 
> --------------------------------------------------------------
>
>                 Key: MAPREDUCE-2744
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-2744
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>          Components: mrv2, security
>    Affects Versions: 0.23.0
>            Reporter: Vinod Kumar Vavilapalli
>             Fix For: 0.23.0
>
>
> Without security, it is impossible to completely avoid AMs faking resources. We can at the least make it as difficult as possible by using the same container tokens and the RM-NM shared key mechanism over unauthenticated RM-NM channel.
> In the minimum, this will avoid accidental bugs in AMs in unsecure mode.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (MAPREDUCE-2744) [MR-279] In unsercure mode, AM can fake resource requirements

Posted by "Vinod Kumar Vavilapalli (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/MAPREDUCE-2744?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vinod Kumar Vavilapalli updated MAPREDUCE-2744:
-----------------------------------------------

    Issue Type: Sub-task  (was: Bug)
        Parent: MAPREDUCE-3101
    
> [MR-279] In unsercure mode, AM can fake resource requirements 
> --------------------------------------------------------------
>
>                 Key: MAPREDUCE-2744
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-2744
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>          Components: mrv2
>            Reporter: Vinod Kumar Vavilapalli
>             Fix For: 0.23.0
>
>
> Without security, it is impossible to completely avoid AMs faking resources. We can at the least make it as difficult as possible by using the same container tokens and the RM-NM shared key mechanism over unauthenticated RM-NM channel.
> In the minimum, this will avoid accidental bugs in AMs in unsecure mode.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (MAPREDUCE-2744) [MR-279] In unsercure mode, AM can fake resource requirements

Posted by "Arun C Murthy (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/MAPREDUCE-2744?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Arun C Murthy updated MAPREDUCE-2744:
-------------------------------------

    Fix Version/s:     (was: 0.23.1)
                   0.24.0
    
> [MR-279] In unsercure mode, AM can fake resource requirements 
> --------------------------------------------------------------
>
>                 Key: MAPREDUCE-2744
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-2744
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>          Components: mrv2, security
>    Affects Versions: 0.23.0
>            Reporter: Vinod Kumar Vavilapalli
>            Priority: Minor
>             Fix For: 0.24.0
>
>
> Without security, it is impossible to completely avoid AMs faking resources. We can at the least make it as difficult as possible by using the same container tokens and the RM-NM shared key mechanism over unauthenticated RM-NM channel.
> In the minimum, this will avoid accidental bugs in AMs in unsecure mode.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (MAPREDUCE-2744) [MR-279] In unsercure mode, AM can fake resource requirements

Posted by "Vinod Kumar Vavilapalli (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/MAPREDUCE-2744?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vinod Kumar Vavilapalli updated MAPREDUCE-2744:
-----------------------------------------------

    Priority: Minor  (was: Major)
    
> [MR-279] In unsercure mode, AM can fake resource requirements 
> --------------------------------------------------------------
>
>                 Key: MAPREDUCE-2744
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-2744
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>          Components: mrv2, security
>    Affects Versions: 0.23.0
>            Reporter: Vinod Kumar Vavilapalli
>            Priority: Minor
>             Fix For: 0.23.1
>
>
> Without security, it is impossible to completely avoid AMs faking resources. We can at the least make it as difficult as possible by using the same container tokens and the RM-NM shared key mechanism over unauthenticated RM-NM channel.
> In the minimum, this will avoid accidental bugs in AMs in unsecure mode.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira