sqoop-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "richard zhou" <richard.z...@intel.com>
Subject Re: Review Request 28834: SQOOP-1755: Sqoop2: Security guide
Date Fri, 12 Dec 2014 04:17:48 GMT


> On Dec. 9, 2014, 4:16 p.m., Abraham Elmahrek wrote:
> > docs/src/site/sphinx/KerberosOnSqoop2.rst, line 85
> > <https://reviews.apache.org/r/28834/diff/1/?file=786283#file786283line85>
> >
> >     I beliee <FQDN> in the principal is actually an "instance" string. In
hadoop world, the "instance" string should be the FQDN because it's used by hadoop-auth to
resolve service locations.
> >     
> >     Given this, can we add a comment describing why FQDN is used in the "instance"
string?
> 
> richard zhou wrote:
>     I did not catch your meaning.
> 
> Abraham Elmahrek wrote:
>     Would detail around why <FQDN> is in the principal be useful?

This line does not emphysis the importance of <FQDN>. It shows that HTTP principal is
a must in sqoop.keytab.


- richard


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/28834/#review64377
-----------------------------------------------------------


On Dec. 10, 2014, 7:10 a.m., richard zhou wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/28834/
> -----------------------------------------------------------
> 
> (Updated Dec. 10, 2014, 7:10 a.m.)
> 
> 
> Review request for Sqoop.
> 
> 
> Repository: sqoop-sqoop2
> 
> 
> Description
> -------
> 
> Given Kerberos has been implemented and sqoop2 now provides SPNEGO, it would be nice
to have a security guide which explains the following:
> Features.
> High level design.
> Usage.
> 
> 
> Diffs
> -----
> 
>   docs/src/site/sphinx/KerberosOnSqoop2.rst PRE-CREATION 
> 
> Diff: https://reviews.apache.org/r/28834/diff/
> 
> 
> Testing
> -------
> 
> 
> Thanks,
> 
> richard zhou
> 
>


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message