Author: buildbot Date: Mon May 18 04:19:23 2015 New Revision: 951678 Log: Staging update by buildbot for accumulo
Modified: websites/staging/accumulo/trunk/content/ (props changed) websites/staging/accumulo/trunk/content/release_notes/1.7.0.html Propchange: websites/staging/accumulo/trunk/content/ ------------------------------------------------------------------------------ --- cms:source-revision (original) +++ cms:source-revision Mon May 18 04:19:23 2015 @@ -1 +1 @@ -1679925 +1679930 Modified: websites/staging/accumulo/trunk/content/release_notes/1.7.0.html ============================================================================== --- websites/staging/accumulo/trunk/content/release_notes/1.7.0.html (original) +++ websites/staging/accumulo/trunk/content/release_notes/1.7.0.html Mon May 18 04:19:23 2015 @@ -210,6 +210,24 @@ Latest 1.5 release: <strong>1.5.2</stron <p>Apache Accumulo 1.7.0 is a release that needs to be described</p> <h1 id="draft-draft-draft-draft-draft-draft">DRAFT DRAFT DRAFT DRAFT DRAFT DRAFT</h1> +<h3 id="client-authentication-with-kerberos">Client Authentication with Kerberos</h3> +<p>Kerberos is far and away the de-facto means provide strong authentication across Hadoop +and other related components. Kerberos uses requires a centralized key distribution center +to authentication users who have credentials provided by an administrator. When Hadoop is +configured for use with Kerberos, all users must provide Kerberos credentials to interact +with the filesystem, launch YARN jobs, or even view certain web pages.</p> +<p>While Accumulo has long supported operation on Hadoop with Kerberos enabled, it required +Accumulo users to still use password-based authentication. <a href="https://issues.apache.org/jira/browse/ACCUMULO-2815">ACCUMULO-2815</a> +added support to Accumulo to allow Accumulo clients to use a single set of Kerberos +credentials to interact with Accumulo and all other Hadoop components.</p> +<p>This authentication leverages the <a href="http://en.wikipedia.org/wiki/Simple_Authentication_and_Security_Layer">Simple Authentication and Security Layer (SASL)</a> +and <a href="http://en.wikipedia.org/wiki/Generic_Security_Services_Application_Program_Interface">GSSAPI</a> to support Kerberos authentication over the existing Thrift-base +RPC infrastructure that Accumulo leverages.</p> +<p>These additions represent a significant forward step for Accumulo, bringing it up to +speed with the rest of the Hadoop components. This results in a much more cohesive +security story for Accumulo that resonates with the battle-tested cell-level security +and authorization module.</p> +<h3 id="data-center-replication">Data-Center Replication</h3> <h3 id="user-initiated-compaction-strategies">User Initiated Compaction Strategies</h3> <p>Per table compaction strategies were added in 1.6.0. In 1.7.0 the ability to specify a compaction strategy for a user initiated compaction was added in