[jira] [Resolved] (HBASE-28952) Add coprocessor hook to authorize user based on client SSL certificate chain

["Duo Zhang (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HBASE-28952?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Duo Zhang resolved HBASE-28952.
-------------------------------
    Hadoop Flags: Reviewed
      Resolution: Fixed

Resolve for now.

Please open another issue for backporting.

Thanks.

> Add coprocessor hook to authorize user based on client SSL certificate chain
> ----------------------------------------------------------------------------
>
>                 Key: HBASE-28952
>                 URL: https://issues.apache.org/jira/browse/HBASE-28952
>             Project: HBase
>          Issue Type: New Feature
>          Components: Coprocessors, rpc, security
>    Affects Versions: 3.0.0-beta-1, 2.6.1
>            Reporter: Andor Molnar
>            Assignee: Andor Molnar
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 3.0.0-beta-2
>
>
> In order to authorize the connected user based on the provided SSL client certificate chain, a new coprocessor hook is needed for Master and RegionServer, because currently there's no way to abort connection by a coprocessor when or after the user is authenticated.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)