Hello,

It seems for my hbase installation anyone can delete my tables. Is there a
way to prevent this? I would like to have only owner of Hmaster with super
authority.

tia

--
--- Get your facts first, then you can distort them as you please.--

you can use the hadoop + kerberos  security feature to have security at
hadoop level

similarly, you can edit hbase-site.xml to have kerberos authentications.

for more you can refer:
https://ccp.cloudera.com/display/CDHDOC/HBase+Security+Configuration

On Tue, May 15, 2012 at 8:11 AM, Rita <[EMAIL PROTECTED]> wrote:

> Hello,
>
> It seems for my hbase installation anyone can delete my tables. Is there a
> way to prevent this? I would like to have only owner of Hmaster with super
> authority.
>
> tia
>
> --
> --- Get your facts first, then you can distort them as you please.--
>

--
Nitin Pawar

HBase 0.92 has table-level security (among other goodies). Check out
this slide on what all it includes:
http://www.slideshare.net/ghelmling/new-hbase-features-coprocessors-and-security

There was also a good blog post earlier on how to set it up, but am
currently unable to locate it. I'll post back in case I find an
archive (or someone else may).

P.s. If you're making it to HBaseCon, you may not wanna miss
http://www.hbasecon.com/sessions/hbase-security-for-the-enterprise/
which also includes a tutorial (from Andrew).

On Tue, May 15, 2012 at 8:11 AM, Rita <[EMAIL PROTECTED]> wrote:
> Hello,
>
> It seems for my hbase installation anyone can delete my tables. Is there a
> way to prevent this? I would like to have only owner of Hmaster with super
> authority.
>
> tia
>
> --
> --- Get your facts first, then you can distort them as you please.--

--
Harsh J

I am guessing I can´t use these features using shell, right?

On Tue, May 15, 2012 at 5:24 AM, Harsh J <[EMAIL PROTECTED]> wrote:

> HBase 0.92 has table-level security (among other goodies). Check out
> this slide on what all it includes:
>
> http://www.slideshare.net/ghelmling/new-hbase-features-coprocessors-and-security
>
> There was also a good blog post earlier on how to set it up, but am
> currently unable to locate it. I'll post back in case I find an
> archive (or someone else may).
>
> P.s. If you're making it to HBaseCon, you may not wanna miss
> http://www.hbasecon.com/sessions/hbase-security-for-the-enterprise/
> which also includes a tutorial (from Andrew).
>
> On Tue, May 15, 2012 at 8:11 AM, Rita <[EMAIL PROTECTED]> wrote:
> > Hello,
> >
> > It seems for my hbase installation anyone can delete my tables. Is there
> a
> > way to prevent this? I would like to have only owner of Hmaster with
> super
> > authority.
> >
> > tia
> >
> > --
> > --- Get your facts first, then you can distort them as you please.--
>
>
>
> --
> Harsh J
>

--
--- Get your facts first, then you can distort them as you please.--

Coprocessors are inside the engine... So they should be in place if you use the shell, or some other access method.

Sent from a remote device. Please excuse any typos...

Mike Segel

On May 15, 2012, at 6:11 AM, Rita <[EMAIL PROTECTED]> wrote:

> I am guessing I can´t use these features using shell, right?
>
>
>
> On Tue, May 15, 2012 at 5:24 AM, Harsh J <[EMAIL PROTECTED]> wrote:
>
>> HBase 0.92 has table-level security (among other goodies). Check out
>> this slide on what all it includes:
>>
>> http://www.slideshare.net/ghelmling/new-hbase-features-coprocessors-and-security
>>
>> There was also a good blog post earlier on how to set it up, but am
>> currently unable to locate it. I'll post back in case I find an
>> archive (or someone else may).
>>
>> P.s. If you're making it to HBaseCon, you may not wanna miss
>> http://www.hbasecon.com/sessions/hbase-security-for-the-enterprise/
>> which also includes a tutorial (from Andrew).
>>
>> On Tue, May 15, 2012 at 8:11 AM, Rita <[EMAIL PROTECTED]> wrote:
>>> Hello,
>>>
>>> It seems for my hbase installation anyone can delete my tables. Is there
>> a
>>> way to prevent this? I would like to have only owner of Hmaster with
>> super
>>> authority.
>>>
>>> tia
>>>
>>> --
>>> --- Get your facts first, then you can distort them as you please.--
>>
>>
>>
>> --
>> Harsh J
>>
>
>
>
> --
> --- Get your facts first, then you can distort them as you please.--

Do any of the CDH have this feature?
On Tue, May 15, 2012 at 7:21 AM, Michel Segel <[EMAIL PROTECTED]>wrote:

> Coprocessors are inside the engine... So they should be in place if you
> use the shell, or some other access method.
>
> Sent from a remote device. Please excuse any typos...
>
> Mike Segel
>
> On May 15, 2012, at 6:11 AM, Rita <[EMAIL PROTECTED]> wrote:
>
> > I am guessing I can´t use these features using shell, right?
> >
> >
> >
> > On Tue, May 15, 2012 at 5:24 AM, Harsh J <[EMAIL PROTECTED]> wrote:
> >
> >> HBase 0.92 has table-level security (among other goodies). Check out
> >> this slide on what all it includes:
> >>
> >>
> http://www.slideshare.net/ghelmling/new-hbase-features-coprocessors-and-security
> >>
> >> There was also a good blog post earlier on how to set it up, but am
> >> currently unable to locate it. I'll post back in case I find an
> >> archive (or someone else may).
> >>
> >> P.s. If you're making it to HBaseCon, you may not wanna miss
> >> http://www.hbasecon.com/sessions/hbase-security-for-the-enterprise/
> >> which also includes a tutorial (from Andrew).
> >>
> >> On Tue, May 15, 2012 at 8:11 AM, Rita <[EMAIL PROTECTED]> wrote:
> >>> Hello,
> >>>
> >>> It seems for my hbase installation anyone can delete my tables. Is
> there
> >> a
> >>> way to prevent this? I would like to have only owner of Hmaster with
> >> super
> >>> authority.
> >>>
> >>> tia
> >>>
> >>> --
> >>> --- Get your facts first, then you can distort them as you please.--
> >>
> >>
> >>
> >> --
> >> Harsh J
> >>
> >
> >
> >
> > --
> > --- Get your facts first, then you can distort them as you please.--
>

--
--- Get your facts first, then you can distort them as you please.--

CDH4 is based off of 92 and will have HBase security.

On Tue, May 15, 2012 at 6:35 PM, Rita <[EMAIL PROTECTED]> wrote:

> Do any of the CDH have this feature?
>
>
> On Tue, May 15, 2012 at 7:21 AM, Michel Segel <[EMAIL PROTECTED]
> >wrote:
>
> > Coprocessors are inside the engine... So they should be in place if you
> > use the shell, or some other access method.
> >
> > Sent from a remote device. Please excuse any typos...
> >
> > Mike Segel
> >
> > On May 15, 2012, at 6:11 AM, Rita <[EMAIL PROTECTED]> wrote:
> >
> > > I am guessing I can´t use these features using shell, right?
> > >
> > >
> > >
> > > On Tue, May 15, 2012 at 5:24 AM, Harsh J <[EMAIL PROTECTED]> wrote:
> > >
> > >> HBase 0.92 has table-level security (among other goodies). Check out
> > >> this slide on what all it includes:
> > >>
> > >>
> >
> http://www.slideshare.net/ghelmling/new-hbase-features-coprocessors-and-security
> > >>
> > >> There was also a good blog post earlier on how to set it up, but am
> > >> currently unable to locate it. I'll post back in case I find an
> > >> archive (or someone else may).
> > >>
> > >> P.s. If you're making it to HBaseCon, you may not wanna miss
> > >> http://www.hbasecon.com/sessions/hbase-security-for-the-enterprise/
> > >> which also includes a tutorial (from Andrew).
> > >>
> > >> On Tue, May 15, 2012 at 8:11 AM, Rita <[EMAIL PROTECTED]> wrote:
> > >>> Hello,
> > >>>
> > >>> It seems for my hbase installation anyone can delete my tables. Is
> > there
> > >> a
> > >>> way to prevent this? I would like to have only owner of Hmaster with
> > >> super
> > >>> authority.
> > >>>
> > >>> tia
> > >>>
> > >>> --
> > >>> --- Get your facts first, then you can distort them as you please.--
> > >>
> > >>
> > >>
> > >> --
> > >> Harsh J
> > >>
> > >
> > >
> > >
> > > --
> > > --- Get your facts first, then you can distort them as you please.--
> >
>
>
>
> --
> --- Get your facts first, then you can distort them as you please.--
>

--
Kevin O'Dell
Customer Operations Engineer, Cloudera

Thanks!

Can't wait until CHD4 :p

On Tue, May 15, 2012 at 6:37 PM, Kevin O'dell <[EMAIL PROTECTED]>wrote:

> CDH4 is based off of 92 and will have HBase security.
>
> On Tue, May 15, 2012 at 6:35 PM, Rita <[EMAIL PROTECTED]> wrote:
>
> > Do any of the CDH have this feature?
> >
> >
> > On Tue, May 15, 2012 at 7:21 AM, Michel Segel <[EMAIL PROTECTED]
> > >wrote:
> >
> > > Coprocessors are inside the engine... So they should be in place if you
> > > use the shell, or some other access method.
> > >
> > > Sent from a remote device. Please excuse any typos...
> > >
> > > Mike Segel
> > >
> > > On May 15, 2012, at 6:11 AM, Rita <[EMAIL PROTECTED]> wrote:
> > >
> > > > I am guessing I can´t use these features using shell, right?
> > > >
> > > >
> > > >
> > > > On Tue, May 15, 2012 at 5:24 AM, Harsh J <[EMAIL PROTECTED]> wrote:
> > > >
> > > >> HBase 0.92 has table-level security (among other goodies). Check out
> > > >> this slide on what all it includes:
> > > >>
> > > >>
> > >
> >
> http://www.slideshare.net/ghelmling/new-hbase-features-coprocessors-and-security
> > > >>
> > > >> There was also a good blog post earlier on how to set it up, but am
> > > >> currently unable to locate it. I'll post back in case I find an
> > > >> archive (or someone else may).
> > > >>
> > > >> P.s. If you're making it to HBaseCon, you may not wanna miss
> > > >> http://www.hbasecon.com/sessions/hbase-security-for-the-enterprise/
> > > >> which also includes a tutorial (from Andrew).
> > > >>
> > > >> On Tue, May 15, 2012 at 8:11 AM, Rita <[EMAIL PROTECTED]> wrote:
> > > >>> Hello,
> > > >>>
> > > >>> It seems for my hbase installation anyone can delete my tables. Is
> > > there
> > > >> a
> > > >>> way to prevent this? I would like to have only owner of Hmaster
> with
> > > >> super
> > > >>> authority.
> > > >>>
> > > >>> tia
> > > >>>
> > > >>> --
> > > >>> --- Get your facts first, then you can distort them as you
> please.--
> > > >>
> > > >>
> > > >>
> > > >> --
> > > >> Harsh J
> > > >>
> > > >
> > > >
> > > >
> > > > --
> > > > --- Get your facts first, then you can distort them as you please.--
> > >
> >
> >
> >
> > --
> > --- Get your facts first, then you can distort them as you please.--
> >
>
>
>
> --
> Kevin O'Dell
> Customer Operations Engineer, Cloudera
>

--
--- Get your facts first, then you can distort them as you please.--

On 5/15/12 2:24 AM, Harsh J wrote:
> HBase 0.92 has table-level security (among other goodies). Check out
> this slide on what all it includes:
> http://www.slideshare.net/ghelmling/new-hbase-features-coprocessors-and-security
>
> There was also a good blog post earlier on how to set it up, but am
> currently unable to locate it. I'll post back in case I find an
> archive (or someone else may).
>
> P.s. If you're making it to HBaseCon, you may not wanna miss
> http://www.hbasecon.com/sessions/hbase-security-for-the-enterprise/
> which also includes a tutorial (from Andrew).
>
Hi Harsh J and Rita,

You might be interested in a couple of blog posts from the old HBase
blog (hbaseblog.com). The site is gone but you can still see them on the
Internet Archive:

http://web.archive.org/web/20101031022526/http://hbaseblog.com/2010/10/11/secure-hbase-access-controls/

http://web.archive.org/web/20100817034022/http://hbaseblog.com/2010/07/21/up-and-running-with-secure-hadoop/

-Eugene

> On 5/15/12 2:24 AM, Harsh J wrote:
> P.s. If you're making it to HBaseCon, you may not wanna miss
> http://www.hbasecon.com/sessions/hbase-security-for-the-enterprise/
> which also includes a tutorial (from Andrew).

Given the time constraints on the material I have to present and Q&A,
what I'm doing is bringing a ~5 minute (accelerated) video instead,
which I may or may not have time to show., and posted the scripts and
configuration used to set up the security enabled demo cluster in EC2
in a public GitHub repo:

    https://github.com/apurtell/tm-ec2-demo

It's possible to use those GitHub scripts right away.

Best regards,

   - Andy

Problems worthy of attack prove their worth by hitting back. - Piet
Hein (via Tom White)

On Thu, May 17, 2012 at 7:19 AM, Eugene Koontz <[EMAIL PROTECTED]> wrote:
> http://web.archive.org/web/20101031022526/http://hbaseblog.com/2010/10/11/secure-hbase-access-controls/
>
> http://web.archive.org/web/20100817034022/http://hbaseblog.com/2010/07/21/up-and-running-with-secure-hadoop/
>

Anyone interested in porting these over to
http://blogs.apache.org/hbase/? They have great stuff in them.
St.Ack

I could repost the "up and running with secure hadoop" one.  But it's
kind of out of date at this point.  I remember, back when the site was
still up, getting some comments on it about things that had already
changed in the 0.20.20X releases.

I can take a look and see how bad it is.
On Thu, May 17, 2012 at 1:22 PM, Stack <[EMAIL PROTECTED]> wrote:
> On Thu, May 17, 2012 at 7:19 AM, Eugene Koontz <[EMAIL PROTECTED]> wrote:
>> http://web.archive.org/web/20101031022526/http://hbaseblog.com/2010/10/11/secure-hbase-access-controls/
>>
>> http://web.archive.org/web/20100817034022/http://hbaseblog.com/2010/07/21/up-and-running-with-secure-hadoop/
>>
>
> Anyone interested in porting these over to
> http://blogs.apache.org/hbase/? They have great stuff in them.
> St.Ack

On 5/17/12 1:22 PM, Stack wrote:
> On Thu, May 17, 2012 at 7:19 AM, Eugene Koontz <[EMAIL PROTECTED]> wrote:
>> http://web.archive.org/web/20101031022526/http://hbaseblog.com/2010/10/11/secure-hbase-access-controls/
>>
>> http://web.archive.org/web/20100817034022/http://hbaseblog.com/2010/07/21/up-and-running-with-secure-hadoop/
>>
>
> Anyone interested in porting these over to
> http://blogs.apache.org/hbase/? They have great stuff in them.
> St.Ack

Hi St. Ack,
Thanks for saying so! I'm planning to port mine (the access controls
post) as soon as my Apache Roller account is granted by the Infra folks.
-Eugene