[Impala-CR](cdh5-trunk) IMPALA-2660: Respect auth_to_local configs from hdfs configs

["Bharath Vissapragada (Code Review)" <ge...@cloudera.org>]

Bharath Vissapragada has uploaded a new change for review.

  http://gerrit.cloudera.org:8080/2800

Change subject: IMPALA-2660: Respect auth_to_local configs from hdfs configs
......................................................................

IMPALA-2660: Respect auth_to_local configs from hdfs configs

This patch implements a new feature to read the auth_to_local
configs from hdfs configuration files, using the parameter
hadoop.security.auth_to_local. This is done by modifying the
User#getShortName() method to use its hdfs equivalent.

This patch includes an end to end authorization test using
sentry where we add specific auth_to_local setting for a certain
user and test if the sentry authorization passes for this user
after applying these rules. Given we don't have tests that run
on a kerberized min-cluster, this patch adds a hack to load this
configuration during even on non-kerberized 'test runs'.

Change-Id: I76485b83c14ba26f6fce66e5f83e8014667829e0
---
M fe/src/main/java/com/cloudera/impala/authorization/User.java
M fe/src/main/java/com/cloudera/impala/service/FeSupport.java
M fe/src/test/java/com/cloudera/impala/analysis/AuthorizationTest.java
M fe/src/test/resources/authz-policy.ini.template
M testdata/cluster/node_templates/common/etc/hadoop/conf/core-site.xml.tmpl
5 files changed, 151 insertions(+), 18 deletions(-)


  git pull ssh://gerrit.cloudera.org:29418/Impala refs/changes/00/2800/1
-- 
To view, visit http://gerrit.cloudera.org:8080/2800
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I76485b83c14ba26f6fce66e5f83e8014667829e0
Gerrit-PatchSet: 1
Gerrit-Project: Impala
Gerrit-Branch: cdh5-trunk
Gerrit-Owner: Bharath Vissapragada <bh...@cloudera.com>