[
https://issues.apache.org/jira/browse/MAPREDUCE-3256?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Vinod Kumar Vavilapalli updated MAPREDUCE-3256:
-----------------------------------------------
Component/s: resourcemanager
nodemanager
applicationmaster
Description: We already authenticate requests to NM and RM from any
AM. We also need to authorize the requests, otherwise a rogue AM could either
launch or kill a container with different ContainerID or masquerade as another
AM and illegally obtain containers meant for others.
Priority: Blocker (was: Major)
Affects Version/s: 0.23.0
> Authorization checks needed for AM->NM and AM->RM protocols
> -----------------------------------------------------------
>
> Key: MAPREDUCE-3256
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3256
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: applicationmaster, nodemanager, resourcemanager, security
> Affects Versions: 0.23.0
> Reporter: Vinod Kumar Vavilapalli
> Priority: Blocker
> Fix For: 0.23.0
>
>
> We already authenticate requests to NM and RM from any AM. We also need to
> authorize the requests, otherwise a rogue AM could either launch or kill a
> container with different ContainerID or masquerade as another AM and
> illegally obtain containers meant for others.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
