You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hbase.apache.org by "Gary Helmling (JIRA)" <ji...@apache.org> on 2011/02/28 22:54:36 UTC
[jira] Created: (HBASE-3582) HMaster and HRegionServer should be
able to login from Kerberos keytab when running on security-enabled Hadoop
HMaster and HRegionServer should be able to login from Kerberos keytab when running on security-enabled Hadoop
--------------------------------------------------------------------------------------------------------------
Key: HBASE-3582
URL: https://issues.apache.org/jira/browse/HBASE-3582
Project: HBase
Issue Type: Bug
Components: security
Affects Versions: 0.90.1, 0.90.0
Reporter: Gary Helmling
Currently HBase can run on top of Hadoop 0.20 with security APIs, but only using the "simple" authentication method. There is currently no configuration or hooks for the HBase process to obtain Kerberos credentials so it can authenticate against secure Hadoop.
We should extend the current {{org.apache.hadoop.hbase.security.User}} hooks to allow obtaining credentials from a keytab file when security is enabled.
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (HBASE-3582) HMaster and HRegionServer should be
able to login from Kerberos keytab when running on security-enabled Hadoop
Posted by "Andrew Purtell (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HBASE-3582?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13001094#comment-13001094 ]
Andrew Purtell commented on HBASE-3582:
---------------------------------------
+1 I say commit it Gary.
> HMaster and HRegionServer should be able to login from Kerberos keytab when running on security-enabled Hadoop
> --------------------------------------------------------------------------------------------------------------
>
> Key: HBASE-3582
> URL: https://issues.apache.org/jira/browse/HBASE-3582
> Project: HBase
> Issue Type: Bug
> Components: security
> Affects Versions: 0.90.0, 0.90.1
> Reporter: Gary Helmling
>
> Currently HBase can run on top of Hadoop 0.20 with security APIs, but only using the "simple" authentication method. There is currently no configuration or hooks for the HBase process to obtain Kerberos credentials so it can authenticate against secure Hadoop.
> We should extend the current {{org.apache.hadoop.hbase.security.User}} hooks to allow obtaining credentials from a keytab file when security is enabled.
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Resolved: (HBASE-3582) HMaster and HRegionServer should be
able to login from Kerberos keytab when running on security-enabled Hadoop
Posted by "Gary Helmling (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HBASE-3582?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Gary Helmling resolved HBASE-3582.
----------------------------------
Resolution: Fixed
Fix Version/s: 0.90.2
Committed to 0.90 branch and trunk.
> HMaster and HRegionServer should be able to login from Kerberos keytab when running on security-enabled Hadoop
> --------------------------------------------------------------------------------------------------------------
>
> Key: HBASE-3582
> URL: https://issues.apache.org/jira/browse/HBASE-3582
> Project: HBase
> Issue Type: Bug
> Components: security
> Affects Versions: 0.90.0, 0.90.1
> Reporter: Gary Helmling
> Assignee: Gary Helmling
> Fix For: 0.90.2
>
> Attachments: HBASE-3582_0.90.patch, HBASE-3582_trunk.patch
>
>
> Currently HBase can run on top of Hadoop 0.20 with security APIs, but only using the "simple" authentication method. There is currently no configuration or hooks for the HBase process to obtain Kerberos credentials so it can authenticate against secure Hadoop.
> We should extend the current {{org.apache.hadoop.hbase.security.User}} hooks to allow obtaining credentials from a keytab file when security is enabled.
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Updated: (HBASE-3582) HMaster and HRegionServer should be
able to login from Kerberos keytab when running on security-enabled Hadoop
Posted by "Gary Helmling (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HBASE-3582?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Gary Helmling updated HBASE-3582:
---------------------------------
Attachment: HBASE-3582_trunk.patch
HBASE-3582_0.90.patch
Final version of patch applied to 0.90 branch and trunk
> HMaster and HRegionServer should be able to login from Kerberos keytab when running on security-enabled Hadoop
> --------------------------------------------------------------------------------------------------------------
>
> Key: HBASE-3582
> URL: https://issues.apache.org/jira/browse/HBASE-3582
> Project: HBase
> Issue Type: Bug
> Components: security
> Affects Versions: 0.90.0, 0.90.1
> Reporter: Gary Helmling
> Assignee: Gary Helmling
> Fix For: 0.90.2
>
> Attachments: HBASE-3582_0.90.patch, HBASE-3582_trunk.patch
>
>
> Currently HBase can run on top of Hadoop 0.20 with security APIs, but only using the "simple" authentication method. There is currently no configuration or hooks for the HBase process to obtain Kerberos credentials so it can authenticate against secure Hadoop.
> We should extend the current {{org.apache.hadoop.hbase.security.User}} hooks to allow obtaining credentials from a keytab file when security is enabled.
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (HBASE-3582) HMaster and HRegionServer should be
able to login from Kerberos keytab when running on security-enabled Hadoop
Posted by "Gary Helmling (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HBASE-3582?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13000630#comment-13000630 ]
Gary Helmling commented on HBASE-3582:
--------------------------------------
Since reviewboard emails don't seem to be getting through, patch is up for review at:
https://review.cloudera.org/r/1611/
> HMaster and HRegionServer should be able to login from Kerberos keytab when running on security-enabled Hadoop
> --------------------------------------------------------------------------------------------------------------
>
> Key: HBASE-3582
> URL: https://issues.apache.org/jira/browse/HBASE-3582
> Project: HBase
> Issue Type: Bug
> Components: security
> Affects Versions: 0.90.0, 0.90.1
> Reporter: Gary Helmling
>
> Currently HBase can run on top of Hadoop 0.20 with security APIs, but only using the "simple" authentication method. There is currently no configuration or hooks for the HBase process to obtain Kerberos credentials so it can authenticate against secure Hadoop.
> We should extend the current {{org.apache.hadoop.hbase.security.User}} hooks to allow obtaining credentials from a keytab file when security is enabled.
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Assigned: (HBASE-3582) HMaster and HRegionServer should be
able to login from Kerberos keytab when running on security-enabled Hadoop
Posted by "Gary Helmling (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HBASE-3582?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Gary Helmling reassigned HBASE-3582:
------------------------------------
Assignee: Gary Helmling
> HMaster and HRegionServer should be able to login from Kerberos keytab when running on security-enabled Hadoop
> --------------------------------------------------------------------------------------------------------------
>
> Key: HBASE-3582
> URL: https://issues.apache.org/jira/browse/HBASE-3582
> Project: HBase
> Issue Type: Bug
> Components: security
> Affects Versions: 0.90.0, 0.90.1
> Reporter: Gary Helmling
> Assignee: Gary Helmling
>
> Currently HBase can run on top of Hadoop 0.20 with security APIs, but only using the "simple" authentication method. There is currently no configuration or hooks for the HBase process to obtain Kerberos credentials so it can authenticate against secure Hadoop.
> We should extend the current {{org.apache.hadoop.hbase.security.User}} hooks to allow obtaining credentials from a keytab file when security is enabled.
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (HBASE-3582) HMaster and HRegionServer should be
able to login from Kerberos keytab when running on security-enabled Hadoop
Posted by "Hudson (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HBASE-3582?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13003610#comment-13003610 ]
Hudson commented on HBASE-3582:
-------------------------------
Integrated in HBase-TRUNK #1771 (See [https://hudson.apache.org/hudson/job/HBase-TRUNK/1771/])
> HMaster and HRegionServer should be able to login from Kerberos keytab when running on security-enabled Hadoop
> --------------------------------------------------------------------------------------------------------------
>
> Key: HBASE-3582
> URL: https://issues.apache.org/jira/browse/HBASE-3582
> Project: HBase
> Issue Type: Bug
> Components: security
> Affects Versions: 0.90.0, 0.90.1
> Reporter: Gary Helmling
> Assignee: Gary Helmling
> Fix For: 0.90.2
>
> Attachments: HBASE-3582_0.90.patch, HBASE-3582_trunk.patch
>
>
> Currently HBase can run on top of Hadoop 0.20 with security APIs, but only using the "simple" authentication method. There is currently no configuration or hooks for the HBase process to obtain Kerberos credentials so it can authenticate against secure Hadoop.
> We should extend the current {{org.apache.hadoop.hbase.security.User}} hooks to allow obtaining credentials from a keytab file when security is enabled.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira