Re: kerberos for outside threads

2014-01-22 Thread Vinod Kumar Vavilapalli
That is a very appropriate setup. As long as those assumptions remain valid, of course. This was the only way how early hadoop clusters were secured - by restricting access to the cluster using firewall and gateways. +Vinod On Jan 21, 2014, at 4:45 PM, Koert Kuipers wrote: > but for a hadoop

Re: kerberos for outside threads

2014-01-21 Thread Koert Kuipers
Hey Haohui, Thanks for responding. I understand that I can disable security. I am wondering if I should in this situation. Or to turn the question around: is there a significant benefit to turning security on here? On Jan 21, 2014 8:26 PM, "Haohui Mai" wrote: > Hi Koert, > > I'm wondering what is

Re: kerberos for outside threads

2014-01-21 Thread Haohui Mai
Hi Koert, I'm wondering what is the end-to-end goal you want to achieve. You can disable security in Hadoop, where the cluster does not perform additional authentication. Obviously you can go without kerberos in this case and protect your clusters with other measures you've mentioned. Alternativ

kerberos for outside threads

2014-01-21 Thread Koert Kuipers
i understand kerberos is used on hadoop to provide security in a multi-user environment, and i can totally see its usage for a shared cluster within a company to make sure sensitive data for one department is safe from prying eyes of another department. but for a hadoop cluster that sits "behind"