Alexey Serbin has uploaded a new change for review.
http://gerrit.cloudera.org:8080/6875
Change subject: WIP [rpc] introduced per-RPC credentials policy
......................................................................
WIP [rpc] introduced per-RPC credentials policy
This patch introduces policy for RPC authentication credentials. The
authentication credentials policy brings some level of control over
the type of client-side credentials used when performing a remote
procedure call.
The idea behind this change is simple: sometimes the server's behavior
depends on the type of client's credentials used to authenticate the
client to the server in the context of the remote procedure call.
One example of such an RPC is MasterService::ConnectToMaster(): it's
impossible to receive an authentication token from the master if making
a call of MasterService::ConnectToMaster() method over a connection
established using authn token. To get a new authn token in that case,
it's necessary to open a new connection to the master using types of
credentials but authn token (e.g., Kerberos credentials will work).
WIP: some stand-alone tests are needed. In the follow-up patch
there is an integration test to verify that this works as a part
of authn token re-acquisition.
Change-Id: I52f806e7b6f6362f66148530124e748e199ae6c2
---
M src/kudu/rpc/connection.cc
M src/kudu/rpc/connection.h
M src/kudu/rpc/negotiation.cc
M src/kudu/rpc/outbound_call.h
M src/kudu/rpc/proxy.cc
M src/kudu/rpc/reactor.cc
M src/kudu/rpc/reactor.h
M src/kudu/rpc/rpc_controller.cc
M src/kudu/rpc/rpc_controller.h
M src/kudu/rpc/user_credentials.cc
M src/kudu/rpc/user_credentials.h
11 files changed, 158 insertions(+), 40 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/75/6875/1
--
To view, visit http://gerrit.cloudera.org:8080/6875
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I52f806e7b6f6362f66148530124e748e199ae6c2
Gerrit-PatchSet: 1
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <aser...@cloudera.com>
