[jira] [Created] (KNOX-250) SSH Bastion Auditing Functionality

["Ed Kohlwey (JIRA)" <ji...@apache.org>]

Ed Kohlwey created KNOX-250:
-------------------------------

             Summary: SSH Bastion Auditing Functionality
                 Key: KNOX-250
                 URL: https://issues.apache.org/jira/browse/KNOX-250
             Project: Apache Knox
          Issue Type: New Feature
            Reporter: Ed Kohlwey


It would be nice for Knox to provide SSH tunneling and auditing functionality in addition to the rest gateway services it provides. This would help Knox be a single-stop for cluster audit logging requirements.

Larry McCay provided the following design guidance via the mailing list related to an implementation:

* Apache Mina SSHD Knox Provider (providers are great for introducing
configuration, filters, listeners, etc.)
* Each topology (which represents a managed Hadoop cluster) may configure
an optional sshd-provider
* The sshd-provider would likely require a ShellFactory that sets up a
tunneling client into the target cluster (perhaps with the sshd client
component)
* The sshd-provider ShellFactory would need to resolve the appropriate
Hadoop client configuration for it's intended Hadoop cluster
* The sshd-provider would expose a separate ssh port per cluster for users
to connect to



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)