You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@livy.apache.org by "Ruslan Dautkhanov (JIRA)" <ji...@apache.org> on 2019/01/15 17:35:00 UTC

[jira] [Created] (LIVY-548) appending @realm to usernames

Ruslan Dautkhanov created LIVY-548:
--------------------------------------

             Summary: appending @realm to usernames
                 Key: LIVY-548
                 URL: https://issues.apache.org/jira/browse/LIVY-548
             Project: Livy
          Issue Type: Improvement
    Affects Versions: 0.5.0, 0.6.0
            Reporter: Ruslan Dautkhanov


We'd like Hadoop to map user names to short names. 
 
For auth_to_local to work, @realm part is mandatory. 
 
For example, Apache Knox if authenticates users using LDAP, 
and then sends requests over to Livy, doesn't append realm. 
 
Is there is a way for append realm in Livy, before it sends 
those requests over to Spark / Hadoop? 
 
It seems we could duplicate rules from Hadoop's auth_to_local
using `livy.server.auth.kerberos.name_rules` but it doesn't work
for the same reason.
 
 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)