-Re: kerberos for outside threads
Haohui Mai 2014-01-22, 01:26
I'm wondering what is the end-to-end goal you want to achieve.
You can disable security in Hadoop, where the cluster does not perform
additional authentication. Obviously you can go without kerberos in this
case and protect your clusters with other measures you've mentioned.
Alternatively, you can enable security without kerberos by plugging in your
own authentication filter.
On Tue, Jan 21, 2014 at 4:45 PM, Koert Kuipers <[EMAIL PROTECTED]> wrote:
> i understand kerberos is used on hadoop to provide security in a
> multi-user environment, and i can totally see its usage for a shared
> cluster within a company to make sure sensitive data for one department is
> safe from prying eyes of another department.
> but for a hadoop cluster that sits "behind" a bunch of web servers to do
> say log analysis, and that already is protected by standard measures (no
> route to cluster from outside, so a web server would have to get
> compromised to gain access), is there any value in securing it with
> kerberos? does anyone do that?
NOTICE: This message is intended for the use of the individual or entity to
which it is addressed and may contain information that is confidential,
privileged and exempt from disclosure under applicable law. If the reader
of this message is not the intended recipient, you are hereby notified that
any printing, copying, dissemination, distribution, disclosure or
forwarding of this communication is strictly prohibited. If you have
received this communication in error, please contact the sender immediately
and delete it from your system. Thank You.