RFC-Proposal for Adding Security and Authentication to Mesos

[Sandeep Sukhani]

Hi,

I am Sandeep Sukhani, aspirant of GSoC 2013. I have applied for "Adding Security and Authentication to Mesos" project. Following is the abstract of my project:

Mesos is used for sharing and managing resources dynamically for frameworks running on clusters. Mesos Master accepts jobs from Framework Schedulers to run on Mesos Slave. Currently any Framework Schedulers can register and submit jobs. Kerberos is secure network authentication protocol, which would be used for securely authenticating Framework schedulers, to ensure only authenticated frameworks can submit jobs. LDAP provides directory service, storing organized records which would be used as principal database for Kerberos. Phase of authentication would be introduced before Schedulers get registered with Master. 

Below is link of my proposal:

http://www.google-melange.com/gsoc/proposal/review/google/gsoc2013/sandeepsukhani/1

Please review my proposal and comment on it.

Regards,

--

Sandeep Sukhani

http://www.youtube.com/colloqmote - My biggest Hack 

[Sandeep Sukhani]

Hi,

I am further studying more and strengthen my base. I have gone through "Kerberos V5 Admin Guide"[1] to get familier with terms, its structure etc. I am now following "Kerberos V5 Installation Guide"[2] to install and configure Kerberos. To make my vision clear I am also deciding what all entities or available alternative to focus on. 

Kerberos implementation is available in 2 major flavors:

1. MIT Kerberos

2. Heimdal Kerberos

I have chosen MIT Kerberos, because it is used mostly and it has good support and documentation available.

To kerberize services, Kerberos has its own API. Another API which could be used is GSSAPI which is used with security services.

I have chosen GSSAPI, because MIT[3] itself and Wikipedia[4] recommends to use GSSAPI over Kerberos API.

It would be great if you comment and correct me if I am wrong. And please let me know whether these selections fulfill needs of community?

References:

1. http://web.mit.edu/kerberos/krb5-1.4/krb5-1.4/doc/krb5-admin.html

2. http://web.mit.edu/kerberos/krb5-1.4/krb5-1.4/doc/krb5-install.html

3. http://web.mit.edu/kerberos/krb5-devel/doc/appdev/gssapi.html

4. http://en.wikipedia.org/wiki/Generic_Security_Services_Application_Program_Interface#Relationship_to_Kerberos

[Chris Aniszczyk]

I would ask this question on the mesos list since it's a dev question for the Mesos team:

http://incubator.apache.org/mesos/mailing-lists.html

Or you can email vi...@twitter.com directly.

--
You received this message because you are subscribed to the Google Groups "Twitter GSOC" group.
To unsubscribe from this group and stop receiving emails from it, send an email to twitter-gsoc...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

--
Cheers,

Chris Aniszczyk | Open Source | Twitter, Inc.
@cra | +1 512 961 6719

[Sandeep Sukhani]

OK Thank you. I would email at given id.