[ 
https://issues.apache.org/jira/browse/HADOOP-4131?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12629512#action_12629512
 ] 

Steve Loughran commented on HADOOP-4131:
----------------------------------------

except now the node is exporting your ~/.ssh dir to anyone the firewall blocked 
hasn't blocked off who is willing to pretend to be you, which implies that you 
are giving full rights to anyone nearby. 

Ideally, every client machine should pick up the public SSH key they trust from 
somewhere secure (metadata? /root/.ssh/authorized_keys); only the master(s) 
would have the private key needed to gain access.

> Allow use of hadoop scripts on EC2
> ----------------------------------
>
>                 Key: HADOOP-4131
>                 URL: https://issues.apache.org/jira/browse/HADOOP-4131
>             Project: Hadoop Core
>          Issue Type: Improvement
>          Components: contrib/ec2
>            Reporter: Tom White
>            Assignee: Tom White
>             Fix For: 0.19.0
>
>
> Currently the Hadoop control scripts do not work on EC2 since instances do 
> not have ssh access to one another. This is inconvenient as it makes it 
> impossible to restart the cluster after a configuration change, for example.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to