[ 
https://issues.apache.org/jira/browse/MAPREDUCE-1026?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Boris Shkolnik updated MAPREDUCE-1026:
--------------------------------------

    Attachment: MAPREDUCE-1026-1.patch

bq. 1) The tasktracker needs to maintain a mapping from JobIDs to job-tokens
done
bq. 2) The call to localizeJobTokenFile should be done before the call to 
taskController.initializeJob(context) in the TaskTracker.localizeJob method. 
Could the localizeJobTokenFile be called within TaskTracker.localizeJobFiles
bq. 3) Minor: for the request/response HTTP headers, make the first character 
upper case
done
bq. 4) HMacUtil could override the equals method and put in logic for comapring 
two HMacUtil objects, instead of defining verifyHash.
We are note really comparing HMacUtil objects, they are just utilities. So I 
think verifyHash() should be more logical.
bq. 5) The Comp class in StoreKeys.java seems to be unused. StoreKeys could be 
Writable (as opposed to having to define load/store methods) 
Comp is used in the TreeMap constructor as the comparator.

Also added synchronization around the map of StoreKeys updates in TaskTracker.

> Shuffle should be secure
> ------------------------
>
>                 Key: MAPREDUCE-1026
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1026
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>          Components: security
>            Reporter: Owen O'Malley
>            Assignee: Boris Shkolnik
>         Attachments: MAPREDUCE-1026-1.patch, MAPREDUCE-1026.patch, 
> MAPREDUCE-1026.patch
>
>
> Since the user's data is available via http from the TaskTrackers, we should 
> require a job-specific secret to access it.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to