Re: Introduce Apache Kerby to Hadoop

2016-02-29 Thread Haohui Mai
t;> how it works. > >>> Yes, starting with this initial steps upgrading MiniKDC to use Kerby is > >> the right thing we could do. After some interactions with Kerby > project, we > >> may have more ideas how to proceed on the followings. > >>> > >>>>> Long

Re: Introduce Apache Kerby to Hadoop

2016-02-29 Thread Steve Loughran
gt; This sounds great! With necessary support from the community like >> feedback and patch reviewing, we can speed up the related work. >>> >>> Regards, >>> Kai >>> >>> -Original Message- >>> From: Steve Loughran [mailto:ste...@hortonwor

RE: Introduce Apache Kerby to Hadoop

2016-02-27 Thread Zheng, Kai
m. Hope this clarifying helps. Thanks. Regards, Kai -Original Message- From: Haohui Mai [mailto:ricet...@gmail.com] Sent: Sunday, February 28, 2016 3:02 AM To: common-dev@hadoop.apache.org Subject: Re: Introduce Apache Kerby to Hadoop Have we evaluated GRPC? A robust RPC requires si

RE: Introduce Apache Kerby to Hadoop

2016-02-27 Thread Zheng, Kai
t: Saturday, February 27, 2016 5:35 PM To: common-dev@hadoop.apache.org Subject: Re: Introduce Apache Kerby to Hadoop I get a excited thinking about the prospect of better performance with auth-conf QoP. HBase RPC is an increasingly distant fork but still close enough to Hadoop in that respect. Ou

Re: Introduce Apache Kerby to Hadoop

2016-02-27 Thread Haohui Mai
nity like > feedback and patch reviewing, we can speed up the related work. > > > > Regards, > > Kai > > > > -Original Message- > > From: Steve Loughran [mailto:ste...@hortonworks.com] > > Sent: Monday, February 22, 2016 6:51 PM > > To: c

Re: Introduce Apache Kerby to Hadoop

2016-02-27 Thread Andrew Purtell
great! With necessary support from the community like feedback > and patch reviewing, we can speed up the related work. > > Regards, > Kai > > -Original Message- > From: Steve Loughran [mailto:ste...@hortonworks.com] > Sent: Monday, February 22, 2016 6:51 PM >

RE: Introduce Apache Kerby to Hadoop

2016-02-22 Thread Zheng, Kai
che.org] Sent: Monday, February 22, 2016 9:05 PM To: common-dev@hadoop.apache.org Subject: Re: Introduce Apache Kerby to Hadoop Replacing MiniKDC with kerby certainly makes sense. Kerby-izing Hadoop 3 needs to be defined carefully. As much as a JWT proponent that I am, I don't know that t

RE: Introduce Apache Kerby to Hadoop

2016-02-22 Thread Zheng, Kai
the community like feedback and patch reviewing, we can speed up the related work. Regards, Kai -Original Message- From: Steve Loughran [mailto:ste...@hortonworks.com] Sent: Monday, February 22, 2016 6:51 PM To: common-dev@hadoop.apache.org Subject: Re: Introduce Apache Kerby to Hadoop I

Re: Introduce Apache Kerby to Hadoop

2016-02-22 Thread larry mccay
Replacing MiniKDC with kerby certainly makes sense. Kerby-izing Hadoop 3 needs to be defined carefully. As much as a JWT proponent that I am, I don't know that that taking up non-standard features such as the JWT token would necessarily serve us well. If we are talking about client side only uptak

Re: Introduce Apache Kerby to Hadoop

2016-02-22 Thread Steve Loughran
I've discussed this offline with Kai, as part of the "let's fix kerberos" project. Not only is it a better Kerberos engine, we can do more diagnostics, get better algorithms and ultimately get better APIs for doing Kerberos and SASL —the latter would dramatically reduce the cost of wire-encryp

Introduce Apache Kerby to Hadoop

2016-02-21 Thread Zheng, Kai
Hi folks, I'd like to mention Apache Kerby [1] here to the community and propose to introduce the project to Hadoop, a sub project of Apache Directory project. Apache Kerby is a Kerberos centric project and aims to provide a first Java Kerberos library that contains both client and server suppo