Re: HBase Security API

2012-07-02 Thread Devaraj Das
IMO, the application that you are referring should be set up to impersonate other users (called proxy-user authentication). Have a look at http://hadoop.apache.org/common/docs/r1.0.3/Secure_Impersonation.html. This can be mapped to the HBase land.. I think the class org.apache.hadoop.hbase.se

Re: HBase Security API

2012-07-01 Thread Andrew Purtell
On Sun, Jul 1, 2012 at 5:29 PM, Tony Dean wrote: > It appears that the Kerberos authentication integration into HBase is via > JAAS Krb5LoginModule. That is, This is a question for gene...@hadoop.apache.org I think. HBase piggybacks on Hadoop's Kerberos integration. Hadoop uses its own custom L

HBase Security API

2012-07-01 Thread Tony Dean
Posting this again in plaintext to see if it registers successfully. Hi, It appears that the Kerberos authentication integration into HBase is via JAAS Krb5LoginModule. That is, I can setup up the "Client" application context and configure where/how the client Kerberos principle is authenticat

hbase security API

2012-07-01 Thread Tony Dean
Hi, It appears that the Kerberos authentication integration into HBase is via JAAS Krb5LoginModule. That is, I can setup up the "Client" application context and configure where/how the client Kerberos principle is authenticated (TGT). Correct? If I have a multi-tenant application that perfor