[jira] [Commented] (SENTRY-62) Solr binding should create a solr-usable Configuration to pass to the BackendProvider

["Gregory Chanan (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SENTRY-62?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13817676#comment-13817676 ] 

Gregory Chanan commented on SENTRY-62:
--------------------------------------

Review board: https://reviews.apache.org/r/15335/

> Solr binding should create a solr-usable Configuration to pass to the BackendProvider
> -------------------------------------------------------------------------------------
>
>                 Key: SENTRY-62
>                 URL: https://issues.apache.org/jira/browse/SENTRY-62
>             Project: Sentry
>          Issue Type: Improvement
>    Affects Versions: 1.3.0
>            Reporter: Gregory Chanan
>            Assignee: Gregory Chanan
>             Fix For: 1.3.0
>
>         Attachments: SENTRY-62v2.patch
>
>
> Today, the SolrAuthzBinding uses the SimpleFileProviderBackend, which ends up creating a configuration via:
> {code}
> new Configuration();
> {code}
> the issue with this is this might not be the Configuration we want -- for example, in a secure setup, it may not have all the authentication/authorization properties necessary to connect to hdfs to read the sentry .ini file.  I'm not sure exactly how this works in hive, but it may be because hive has the relevant core-site.xml, hdfs-site.xml in its classpath, whereas in solr, this is uncommon.
> Solr does have a way to specify hdfs configs already via the HdfsDirectoryFactory and HdfsUtils.  We should just reuse this.



--
This message was sent by Atlassian JIRA
(v6.1#6144)