[jira] [Commented] (HADOOP-9811) Common libraries & management facilities for HAS

["Larry McCay (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HADOOP-9811?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13726473#comment-13726473 ] 

Larry McCay commented on HADOOP-9811:
-------------------------------------

Hi Jerry - please see HADOOP-9534 Credential Management Framework for addressing "Key management facilities". There is an initial patch for introducing the framework and password indirection. It also includes capabilities built on top of the keystore and aliasing/indirection for simple crypto services. This is generally useful for those capabilities but also utilized by HADOOP-9781 JWT SSO Token and Authority https://issues.apache.org/jira/browse/HADOOP-9781 for the token authority to sign and verify jwt tokens.
                
> Common libraries & management facilities for HAS
> ------------------------------------------------
>
>                 Key: HADOOP-9811
>                 URL: https://issues.apache.org/jira/browse/HADOOP-9811
>             Project: Hadoop Common
>          Issue Type: Task
>          Components: security
>    Affects Versions: 3.0.0
>            Reporter: Jerry Chen
>              Labels: Rhino
>
> This is the umbrella JIRA task to define and implement the common and management facilities shared across the implementation of different services in HAS. This task is defined to highlight the shared facilities to avoid duplicate design and implementation across different services. The common facilities including but not limited the following:
> * Configuration API: How configuration are loaded and stored.
> * Persistent API and facilities: How the data (configuration) are persistent to storage, such as file or database.
> * Auditing & logging API: Define a standard way across the system to do auditing and logging.
> * High availability mechanism: Considering the common way of realize high availability for services.
> * Session management: If service needs session, how session management is implemented as common.
> * REST API framework and authentication: Defines the common way of implement REST API and API authentication.
> * Key management facilities: Facilities for manage the key or certificate across the system.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira