Steve Loughran created HADOOP-15862:
---------------------------------------
Summary: ABFS to support a Delegation Token provider which
marshalls current login secrets
Key: HADOOP-15862
URL: https://issues.apache.org/jira/browse/HADOOP-15862
Project: Hadoop Common
Issue Type: Sub-task
Components: fs/adl
Affects Versions: 3.2.0
Reporter: Steve Loughran
ABFS has an extension point for generating delegation tokens, presumably the
implementation is actually using Kerberos to generate some secrets to pass
around.
HADOOP-14556 shows how an object store can actually implement DTs which
marshall full credentials over the wire to remote services, so allowing users
to submit queries to shared clusters. This isn't as secure as kerberos, but
does let users access their private data.
(This JIRA is avoiding worrying about session & role auth, just taking the
config options for login and marshalling as a DT)
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-dev-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-dev-h...@hadoop.apache.org
