You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@accumulo.apache.org by bu...@apache.org on 2015/05/18 06:19:23 UTC

svn commit: r951678 - in /websites/staging/accumulo/trunk/content: ./ release_notes/1.7.0.html

Author: buildbot
Date: Mon May 18 04:19:23 2015
New Revision: 951678

Log:
Staging update by buildbot for accumulo

Modified:
    websites/staging/accumulo/trunk/content/   (props changed)
    websites/staging/accumulo/trunk/content/release_notes/1.7.0.html

Propchange: websites/staging/accumulo/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Mon May 18 04:19:23 2015
@@ -1 +1 @@
-1679925
+1679930

Modified: websites/staging/accumulo/trunk/content/release_notes/1.7.0.html
==============================================================================
--- websites/staging/accumulo/trunk/content/release_notes/1.7.0.html (original)
+++ websites/staging/accumulo/trunk/content/release_notes/1.7.0.html Mon May 18 04:19:23 2015
@@ -210,6 +210,24 @@ Latest 1.5 release: <strong>1.5.2</stron
 
     <p>Apache Accumulo 1.7.0 is a release that needs to be described</p>
 <h1 id="draft-draft-draft-draft-draft-draft">DRAFT DRAFT DRAFT DRAFT DRAFT DRAFT</h1>
+<h3 id="client-authentication-with-kerberos">Client Authentication with Kerberos</h3>
+<p>Kerberos is far and away the de-facto means provide strong authentication across Hadoop
+and other related components. Kerberos uses requires a centralized key distribution center
+to authentication users who have credentials provided by an administrator. When Hadoop is
+configured for use with Kerberos, all users must provide Kerberos credentials to interact
+with the filesystem, launch YARN jobs, or even view certain web pages.</p>
+<p>While Accumulo has long supported operation on Hadoop with Kerberos enabled, it required
+Accumulo users to still use password-based authentication. <a href="https://issues.apache.org/jira/browse/ACCUMULO-2815">ACCUMULO-2815</a>
+added support to Accumulo to allow Accumulo clients to use a single set of Kerberos
+credentials to interact with Accumulo and all other Hadoop components.</p>
+<p>This authentication leverages the <a href="http://en.wikipedia.org/wiki/Simple_Authentication_and_Security_Layer">Simple Authentication and Security Layer (SASL)</a>
+and <a href="http://en.wikipedia.org/wiki/Generic_Security_Services_Application_Program_Interface">GSSAPI</a> to support Kerberos authentication over the existing Thrift-base
+RPC infrastructure that Accumulo leverages.</p>
+<p>These additions represent a significant forward step for Accumulo, bringing it up to
+speed with the rest of the Hadoop components. This results in a much more cohesive
+security story for Accumulo that resonates with the battle-tested cell-level security
+and authorization module.</p>
+<h3 id="data-center-replication">Data-Center Replication</h3>
 <h3 id="user-initiated-compaction-strategies">User Initiated Compaction Strategies</h3>
 <p>Per table compaction strategies were added in 1.6.0.  In 1.7.0 the ability to
 specify a compaction strategy for a user initiated compaction was added in