Re: Authentication and security with hadoop

2016-07-14 Thread ravi teja
rom: *ravi teja <raviort...@gmail.com> > *Date: *Wednesday, July 13, 2016 at 5:46 AM > *To: *"user@hadoop.apache.org" <user@hadoop.apache.org> > *Subject: *Authentication and security with hadoop > > > > Hi Community, > > > > We wanted to have

Re: Authentication and security with hadoop

2016-07-13 Thread Arpit Agarwal
/SecureMode.md#Multihoming From: ravi teja <raviort...@gmail.com> Date: Wednesday, July 13, 2016 at 5:46 AM To: "user@hadoop.apache.org" <user@hadoop.apache.org> Subject: Authentication and security with hadoop Hi Community, We wanted to have authentication on hadoop, means want

Authentication and security with hadoop

2016-07-13 Thread ravi teja
Hi Community, We wanted to have authentication on hadoop, means want to make sure the user is what he claims to be and doesn't proxy another users using env variables. >From many links , I see that the default choice is kerberos with hadoop. And as far i understand ,I see that ranger is more

Re: Problem when configure the security in hadoop

2015-07-07 Thread Zhijie Shen
@hadoop.apache.org Subject: Problem when configure the security in hadoop Hi, I do the security configuration for Hadoop these days, the Kerberos works fine, but there maybe has some problems on sasl configuration. The following is the related configuration in hdfs-site.xml

Problem when configure the security in hadoop

2015-07-03 Thread Colin Ma
Hi, I do the security configuration for Hadoop these days, the Kerberos works fine, but there maybe has some problems on sasl configuration. The following is the related configuration in hdfs-site.xml: property namedfs.http.policy/name valueHTTPS_ONLY/value

Re: Kerberos Security in Hadoop

2015-02-19 Thread Alexander Alten-Lorenz
...@gmail.com wrote: Hi, Has anybody worked on Kerberos security on Hadoop ? Can you please guide me , any document link will be appreciated ? Thanks Krish

Re: Kerberos Security in Hadoop

2015-02-18 Thread Manoj Samel
-dist/hadoop-common/SecureMode.html https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/Configuring_a_Kerberos_5_Server.html On Wed, Feb 18, 2015 at 4:49 PM, Krish Donald gotomyp...@gmail.com wrote: Hi, Has anybody worked on Kerberos security

Kerberos Security in Hadoop

2015-02-18 Thread Krish Donald
Hi, Has anybody worked on Kerberos security on Hadoop ? Can you please guide me , any document link will be appreciated ? Thanks Krish

Re: Kerberos Security in Hadoop

2015-02-18 Thread Alexander Pivovarov
: Hi, Has anybody worked on Kerberos security on Hadoop ? Can you please guide me , any document link will be appreciated ? Thanks Krish

Re: Kerberos Security in Hadoop

2015-02-18 Thread Alexander Pivovarov
/html/Managing_Smart_Cards/Configuring_a_Kerberos_5_Server.html On Wed, Feb 18, 2015 at 4:49 PM, Krish Donald gotomyp...@gmail.com wrote: Hi, Has anybody worked on Kerberos security on Hadoop ? Can you please guide me , any document link will be appreciated ? Thanks Krish

Implementing security in hadoop

2014-08-13 Thread Chhaya Vishwakarma
Hi, I'm trying to implement security on my hadoop data. I'm using Cloudera hadoop Below are the two specific things I'm looking for 1. Role based authorization and authentication 2. Encryption on data residing in HDFS I have looked into Kerboroes but it doesn't provide encryption for data

RE: Implementing security in hadoop

2014-08-13 Thread Liu, Yi A
to completion. Regards, Yi Liu From: Chhaya Vishwakarma [mailto:chhaya.vishwaka...@lntinfotech.com] Sent: Wednesday, August 13, 2014 2:32 PM To: user@hadoop.apache.org Subject: Implementing security in hadoop Hi, I'm trying to implement security on my hadoop data. I'm using Cloudera hadoop

RE: Implementing security in hadoop

2014-08-13 Thread Chhaya Vishwakarma
Yea you are right I need encryption for data-at-rest From: Liu, Yi A [mailto:yi.a@intel.com] Sent: Wednesday, August 13, 2014 12:46 PM To: user@hadoop.apache.org Subject: RE: Implementing security in hadoop Hi Chhaya, I have looked into Kerboroes but it doesn't provide encryption for data

RE: Implementing security in hadoop

2014-08-13 Thread Liu, Yi A
@hadoop.apache.org Subject: RE: Implementing security in hadoop Yea you are right I need encryption for data-at-rest From: Liu, Yi A [mailto:yi.a@intel.com] Sent: Wednesday, August 13, 2014 12:46 PM To: user@hadoop.apache.orgmailto:user@hadoop.apache.org Subject: RE: Implementing security in hadoop Hi

RE: Implementing security in hadoop

2014-08-13 Thread Chhaya Vishwakarma
Thanks, but this link is not working it says issuer doesn't exist Are there any other security tool for the same? From: Liu, Yi A [mailto:yi.a@intel.com] Sent: Wednesday, August 13, 2014 1:57 PM To: user@hadoop.apache.org Subject: RE: Implementing security in hadoop OK, it's still under

RE: Implementing security in hadoop

2014-08-13 Thread Liu, Yi A
solutions from Hadoop vendors' distributions if you use them. Regards, Yi Liu From: Chhaya Vishwakarma [mailto:chhaya.vishwaka...@lntinfotech.com] Sent: Wednesday, August 13, 2014 6:17 PM To: user@hadoop.apache.org Subject: RE: Implementing security in hadoop Thanks, but this link is not working it says

Re: one minute delay in running a simple ls command on hadoop (maybe near security groups..): hadoop 0.23.5

2013-04-04 Thread Gopi Krishna M
in case anybody has some idea on what I should look for in debugging this.. below is a strace of the simple bin/hadoop dfs -ls / command run on the machine running namenode % time seconds usecs/call callserrors syscall -- --- --- - -

Re: one minute delay in running a simple ls command on hadoop (maybe near security groups..): hadoop 0.23.5

2013-04-04 Thread Daryn Sharp
Hi Gopi, Check if you can run groups -F hduser. I think it's causing the delay. Daryn On Mar 31, 2013, at 1:17 AM, Gopi Krishna M wrote: Hi.. I have installed hadoop 0.23.5 and is working fine on two of my installations. In a new installation on Windows Azure VMs, I am seeing an inordinate

Re: one minute delay in running a simple ls command on hadoop (maybe near security groups..): hadoop 0.23.5

2013-04-04 Thread Gopi Krishna M
just tried the command. returns instantaneously, no delay ~/installations/hadoop-0.23.5$ groups hduser hduser : hduser ps: -F option is not working. On Thu, Apr 4, 2013 at 6:29 PM, Daryn Sharp da...@yahoo-inc.com wrote: Hi Gopi, Check if you can run groups -F hduser. I think it's

Re: one minute delay in running a simple ls command on hadoop (maybe near security groups..): hadoop 0.23.5

2013-04-04 Thread MARCOS MEDRADO RUBINELLI
Gopi, The namenode is essentially running bash -c id -Gn hduser and waiting for the response. You could try executing from the shell it to see if it does take a long time in Azure, or if the output is too complex to parse. Regards, Marcos In 04-04-2013 09:33, Gopi Krishna M wrote: in case

Re: one minute delay in running a simple ls command on hadoop (maybe near security groups..): hadoop 0.23.5

2013-04-04 Thread Gopi Krishna M
Hi Marcos, executed it from shell.. returns immediately, no delay and the output is just hduser.. hduser@hmaster-asia:~/installations/hadoop-0.23.5$ bash -c id -Gn hduser hduser one important thing I noticed on logs is (posted in my first mail), it always get stuck *twice for exactly 60secs*.

one minute delay in running a simple ls command on hadoop (maybe near security groups..): hadoop 0.23.5

2013-03-31 Thread Gopi Krishna M
Hi.. I have installed hadoop 0.23.5 and is working fine on two of my installations. In a new installation on Windows Azure VMs, I am seeing an inordinate delay (of 1 minute) when doing a simple dfs ls command. This is a 3 node cluster, running 64 bit Ubuntu 12.04.1 LTS, Sun jre command :

security-in-HADOOP

2012-09-11 Thread nisha
How security is maintained in hadoop, is it maintained by giving folder/file permissions in hadoop how can i make sure that somebody else dunt write in to my hdfs file system ...

Re: security-in-HADOOP

2012-09-11 Thread Bertrand Dechoux
By reading the documentation, like the following http://hadoop.apache.org/docs/r1.0.3/hdfs_permissions_guide.html On Tue, Sep 11, 2012 at 8:14 PM, nisha nishakulkarn...@gmail.com wrote: How security is maintained in hadoop, is it maintained by giving folder/file permissions in hadoop how can

RE: Security in Hadoop-1.0.0

2012-02-15 Thread Stuti Awasthi
What are the thoughts on hdfsproxy ? http://hadoop.apache.org/hdfs/docs/r0.21.0/hdfsproxy.html Will this be useful in my scenario ? -Original Message- From: Stuti Awasthi Sent: Wednesday, February 15, 2012 12:28 PM To: hdfs-user@hadoop.apache.org Subject: RE: Security in Hadoop-1.0.0

RE: Security in Hadoop-1.0.0

2012-02-14 Thread Stuti Awasthi
on correct path ? -Original Message- From: Stuti Awasthi Sent: Tuesday, February 14, 2012 1:48 PM To: 'hdfs-user@hadoop.apache.org' Subject: RE: Security in Hadoop-1.0.0 After some googling I found the following link : http://mapredit.blogspot.in/2011/10/secure-your-hadoop-cluster-part-i.html

RE: Security in Hadoop-1.0.0

2012-02-14 Thread Stuti Awasthi
as well as mapreduce. Please suggest me some links through which I can configure dfs with LDP also. Thanks -Original Message- From: Stuti Awasthi Sent: Tuesday, February 14, 2012 12:28 PM To: hdfs-user@hadoop.apache.org Subject: RE: Security in Hadoop-1.0.0 Thanks Patrick, The concept

Re: Security in Hadoop-1.0.0

2012-02-14 Thread Harsh J
existing LDAP service, please follow articles such as http://www.linux-mag.com/id/4738/ Once your Kerberos instance is setup to talk and authenticate users on your LDAP instance, carry on with the guide pointed out earlier at https://ccp.cloudera.com/display/CDHDOC/Configuring+Hadoop+Security+in+CDH3

RE: Security in Hadoop-1.0.0

2012-02-14 Thread Stuti Awasthi
and explaining them in detail. I will read more and try to implement this at my end. Stuti Awasthi -Original Message- From: Harsh J [mailto:ha...@cloudera.com] Sent: Tuesday, February 14, 2012 7:14 PM To: hdfs-user@hadoop.apache.org Subject: Re: Security in Hadoop-1.0.0 Stuti, What

RE: Security in Hadoop-1.0.0

2012-02-13 Thread Stuti Awasthi
Hi, I am bit confused on Security part of Hadoop. Cluster is behind the firewall. I have read that Hadoop can be configured with LDAP also. I want to know which is better : configure Hadoop security with LDAP or Kerberos as both provide authentication. Please provide me more details

Re: Security in Hadoop-1.0.0

2012-02-13 Thread Patrick Angeles
wrote: Hi, I am bit confused on Security part of Hadoop. Cluster is behind the firewall. I have read that Hadoop can be configured with LDAP also. I want to know which is better : configure Hadoop security with LDAP or Kerberos as both provide authentication. Please provide me more details

RE: Security in Hadoop-1.0.0

2012-02-13 Thread Stuti Awasthi
of configuring this version of Hadoop with LDAP. Thanks From: Patrick Angeles [mailto:patrickange...@gmail.com] Sent: Monday, February 13, 2012 8:29 PM To: hdfs-user@hadoop.apache.org Subject: Re: Security in Hadoop-1.0.0 LDAP and Kerberos are orthogonal in Hadoop, but both are often used together

Security in Hadoop-1.0.0

2012-02-06 Thread Stuti Awasthi
Hi all, I started looking into configure security in Hadoop-1.0.0 but do not find concrete documentation on which kind of security is provided in this release and how to configure them. Currently I am following http://hadoop.apache.org/common/docs/r1.0.0/; documentation As per knowledge, Proxy

Re: Security in Hadoop-1.0.0

2012-02-06 Thread alo alt
Kerberos tokens and lifetime: http://hortonworks.com/the-role-of-delegation-tokens-in-apache-hadoop-security/ Security in CDH3 (the same as hadoop) https://ccp.cloudera.com/display/CDHDOC/CDH3+Security+Guide best, Alex -- Alexander Lorenz http://mapredit.blogspot.com On Feb 6, 2012, at 11:19

Regarding security in hadoop

2012-01-30 Thread renuka
://hadoop.apache.org/common/docs/r1.0.0/ Could you please point us the documentation to setup/configure security with hadoop cluster. Thanks MRK -- View this message in context: http://hadoop-common.472056.n3.nabble.com/Regarding-security-in-hadoop-tp3699465p3699465.html Sent from the Users mailing

Re: Regarding security in hadoop

2012-01-30 Thread Owen O'Malley
some of the motivation for security over here: http://hortonworks.com/category/apache-hadoop/hadoop-security/ -- Owen

Tutorial about Security in Hadoop

2011-09-16 Thread Xianqing Yu
Hi Community, I am trying to install security mechanism in the Hadoop, for instance, using kerberos. However, I didn't find much information about it. Anyone knows that if there any link talking about the tutorial about installing kerberos in Hadoop? Thanks, Xianqing Yu -- Graduate

Re: Tutorial about Security in Hadoop

2011-09-16 Thread Uma Maheswara Rao G 72686
Hi, please find the below links https://media.blackhat.com/bh-us-10/whitepapers/Becherer/BlackHat-USA-2010-Becherer-Andrew-Hadoop-Security-wp.pdf http://markmail.org/download.xqy?id=yjdqleg3zv5pr54tnumber=1 Which will help you to understand more. Regards, Uma - Original Message - From

RE: Security issue: hadoop fs shell bypass authentication?

2010-03-08 Thread Michael Segel
Date: Sun, 7 Mar 2010 22:36:30 -0800 Subject: Re: Security issue: hadoop fs shell bypass authentication? From: awittena...@linkedin.com To: common-user@hadoop.apache.org Any user with access can impersonate any other user, including the hadoop root user, without something like

Re: Security issue: hadoop fs shell bypass authentication?

2010-03-08 Thread Allen Wittenauer
On 3/8/10 11:06 AM, Michael Segel michael_se...@hotmail.com wrote: The other issue is how secure is 'secure enough' ? If you limit the physical access to the cloud, limit connectivity to the cloud to certain 'choke' points, and then authenticate at the client level prior to connection,

Re: Security issue: hadoop fs shell bypass authentication?

2010-03-07 Thread Allen Wittenauer
On 3/6/10 10:41 PM, jiang licht licht_ji...@yahoo.com wrote: I can feel that pain, Kerberos needs you to pull more hair from your head :) I worked on it a while back and now only remember bit of it. The only other real choice is PKI. CRLs? Blech. I'd much rather tie the grid into my

Re: Security issue: hadoop fs shell bypass authentication?

2010-03-06 Thread Owen O'Malley
On Mar 5, 2010, at 4:49 PM, Allen Wittenauer wrote: On 3/5/10 1:57 PM, jiang licht licht_ji...@yahoo.com wrote: So, this means that hadoop fs shell does not require any authentication and can be fired from anywhere? There is no authentication/security layer in any released version of

Re: Security issue: hadoop fs shell bypass authentication?

2010-03-06 Thread jiang licht
Good to know and look forward to seeing next release of hadoop with such new security features...   Thanks, -- Michael --- On Sat, 3/6/10, Owen O'Malley omal...@apache.org wrote: From: Owen O'Malley omal...@apache.org Subject: Re: Security issue: hadoop fs shell bypass authentication

Re: Security issue: hadoop fs shell bypass authentication?

2010-03-06 Thread Huy Phan
, -- Michael --- On Sat, 3/6/10, Owen O'Malleyomal...@apache.org wrote: From: Owen O'Malleyomal...@apache.org Subject: Re: Security issue: hadoop fs shell bypass authentication? To: common-user@hadoop.apache.org Date: Saturday, March 6, 2010, 2:20 AM On Mar 5, 2010, at 4:49 PM, Allen Wittenauer

Re: Security issue: hadoop fs shell bypass authentication?

2010-03-06 Thread Edward Capriolo
with such new security features... � Thanks, -- Michael --- On Sat, 3/6/10, Owen O'Malleyomal...@apache.org wrote: From: Owen O'Malleyomal...@apache.org Subject: Re: Security issue: hadoop fs shell bypass authentication? To: common-user@hadoop.apache.org Date: Saturday, March 6, 2010, 2:20

Re: Security issue: hadoop fs shell bypass authentication?

2010-03-06 Thread jiang licht
using, so, no worry actually ... Thank, -- Michael --- On Sat, 3/6/10, Edward Capriolo edlinuxg...@gmail.com wrote: From: Edward Capriolo edlinuxg...@gmail.com Subject: Re: Security issue: hadoop fs shell bypass authentication? To: common-user@hadoop.apache.org Date: Saturday, March 6, 2010, 8

Security issue: hadoop fs shell bypass authentication?

2010-03-05 Thread jiang licht
I am considering the following problem: if someone knows the master and ports of a hadoop cluster, is he able to run hadoop fs shell to read/write/update/delete data in the cluster without any authentication? Ofcoz, the cluster should be built on top of an isolated island of private network,