You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hive.apache.org by "Carl Steinbach (JIRA)" <ji...@apache.org> on 2012/07/19 22:53:34 UTC

[jira] [Created] (HIVE-3277) Enable Metastore audit logging for non-secure connections

Carl Steinbach created HIVE-3277:
------------------------------------

             Summary: Enable Metastore audit logging for non-secure connections
                 Key: HIVE-3277
                 URL: https://issues.apache.org/jira/browse/HIVE-3277
             Project: Hive
          Issue Type: Improvement
          Components: Logging, Metastore, Security
            Reporter: Carl Steinbach




--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HIVE-3277) Enable Metastore audit logging for non-secure connections

Posted by "Hudson (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HIVE-3277?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13463497#comment-13463497 ] 

Hudson commented on HIVE-3277:
------------------------------

Integrated in Hive-trunk-h0.21 #1697 (See [https://builds.apache.org/job/Hive-trunk-h0.21/1697/])
    HIVE-3277. Enable Metastore audit logging for non-secure connections (Sean Mackrory via cws) (Revision 1390155)

     Result = FAILURE
cws : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1390155
Files : 
* /hive/trunk/metastore/src/java/org/apache/hadoop/hive/metastore/HiveMetaStore.java

                
> Enable Metastore audit logging for non-secure connections
> ---------------------------------------------------------
>
>                 Key: HIVE-3277
>                 URL: https://issues.apache.org/jira/browse/HIVE-3277
>             Project: Hive
>          Issue Type: Improvement
>          Components: Logging, Metastore, Security
>            Reporter: Carl Steinbach
>            Assignee: Sean Mackrory
>         Attachments: HIVE-3277.patch.1, HIVE-3277.patch.2
>
>


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Commented] (HIVE-3277) Enable Metastore audit logging for non-secure connections

Posted by "Sean Mackrory (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HIVE-3277?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13462121#comment-13462121 ] 

Sean Mackrory commented on HIVE-3277:
-------------------------------------

Code review: https://reviews.apache.org/r/7236/
                
> Enable Metastore audit logging for non-secure connections
> ---------------------------------------------------------
>
>                 Key: HIVE-3277
>                 URL: https://issues.apache.org/jira/browse/HIVE-3277
>             Project: Hive
>          Issue Type: Improvement
>          Components: Logging, Metastore, Security
>            Reporter: Carl Steinbach
>            Assignee: Sean Mackrory
>         Attachments: HIVE-3277.patch.1
>
>


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (HIVE-3277) Enable Metastore audit logging for non-secure connections

Posted by "Sean Mackrory (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/HIVE-3277?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sean Mackrory updated HIVE-3277:
--------------------------------

    Attachment: HIVE-3277.patch
    
> Enable Metastore audit logging for non-secure connections
> ---------------------------------------------------------
>
>                 Key: HIVE-3277
>                 URL: https://issues.apache.org/jira/browse/HIVE-3277
>             Project: Hive
>          Issue Type: Improvement
>          Components: Logging, Metastore, Security
>            Reporter: Carl Steinbach
>         Attachments: HIVE-3277.patch
>
>


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (HIVE-3277) Enable Metastore audit logging for non-secure connections

Posted by "Sean Mackrory (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/HIVE-3277?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sean Mackrory updated HIVE-3277:
--------------------------------

    Attachment: HIVE-3277.patch.1

My apologies - original patch was malformed.
                
> Enable Metastore audit logging for non-secure connections
> ---------------------------------------------------------
>
>                 Key: HIVE-3277
>                 URL: https://issues.apache.org/jira/browse/HIVE-3277
>             Project: Hive
>          Issue Type: Improvement
>          Components: Logging, Metastore, Security
>            Reporter: Carl Steinbach
>            Assignee: Sean Mackrory
>         Attachments: HIVE-3277.patch.1
>
>


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (HIVE-3277) Enable Metastore audit logging for non-secure connections

Posted by "Carl Steinbach (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/HIVE-3277?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Carl Steinbach updated HIVE-3277:
---------------------------------

    Affects Version/s: 0.10.0

@Sean: Thanks for marking this resolved.
                
> Enable Metastore audit logging for non-secure connections
> ---------------------------------------------------------
>
>                 Key: HIVE-3277
>                 URL: https://issues.apache.org/jira/browse/HIVE-3277
>             Project: Hive
>          Issue Type: Improvement
>          Components: Logging, Metastore, Security
>    Affects Versions: 0.10.0
>            Reporter: Carl Steinbach
>            Assignee: Sean Mackrory
>         Attachments: HIVE-3277.patch.1, HIVE-3277.patch.2
>
>


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (HIVE-3277) Enable Metastore audit logging for non-secure connections

Posted by "Sean Mackrory (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/HIVE-3277?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sean Mackrory updated HIVE-3277:
--------------------------------

    Status: Patch Available  (was: Open)

This patch uses the alternative method of determining the IP address in the event that there is no SASL connection. I've tested this out on a pseudo-distributed Hadoop cluster and audit logging worked.
                
> Enable Metastore audit logging for non-secure connections
> ---------------------------------------------------------
>
>                 Key: HIVE-3277
>                 URL: https://issues.apache.org/jira/browse/HIVE-3277
>             Project: Hive
>          Issue Type: Improvement
>          Components: Logging, Metastore, Security
>            Reporter: Carl Steinbach
>         Attachments: HIVE-3277.patch
>
>


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (HIVE-3277) Enable Metastore audit logging for non-secure connections

Posted by "Carl Steinbach (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/HIVE-3277?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Carl Steinbach updated HIVE-3277:
---------------------------------

    Assignee: Sean Mackrory
    
> Enable Metastore audit logging for non-secure connections
> ---------------------------------------------------------
>
>                 Key: HIVE-3277
>                 URL: https://issues.apache.org/jira/browse/HIVE-3277
>             Project: Hive
>          Issue Type: Improvement
>          Components: Logging, Metastore, Security
>            Reporter: Carl Steinbach
>            Assignee: Sean Mackrory
>         Attachments: HIVE-3277.patch
>
>


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Commented] (HIVE-3277) Enable Metastore audit logging for non-secure connections

Posted by "Carl Steinbach (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HIVE-3277?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13462144#comment-13462144 ] 

Carl Steinbach commented on HIVE-3277:
--------------------------------------

+1. Will commit if tests pass.
                
> Enable Metastore audit logging for non-secure connections
> ---------------------------------------------------------
>
>                 Key: HIVE-3277
>                 URL: https://issues.apache.org/jira/browse/HIVE-3277
>             Project: Hive
>          Issue Type: Improvement
>          Components: Logging, Metastore, Security
>            Reporter: Carl Steinbach
>            Assignee: Sean Mackrory
>         Attachments: HIVE-3277.patch.1, HIVE-3277.patch.2
>
>


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Commented] (HIVE-3277) Enable Metastore audit logging for non-secure connections

Posted by "Carl Steinbach (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HIVE-3277?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13418664#comment-13418664 ] 

Carl Steinbach commented on HIVE-3277:
--------------------------------------

Audit logging for the metastore was added in HIVE-1948, but it only gets invoked if the client connection is secure. We should also enable this for non-secure connections.
                
> Enable Metastore audit logging for non-secure connections
> ---------------------------------------------------------
>
>                 Key: HIVE-3277
>                 URL: https://issues.apache.org/jira/browse/HIVE-3277
>             Project: Hive
>          Issue Type: Improvement
>          Components: Logging, Metastore, Security
>            Reporter: Carl Steinbach
>


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (HIVE-3277) Enable Metastore audit logging for non-secure connections

Posted by "Sean Mackrory (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/HIVE-3277?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sean Mackrory updated HIVE-3277:
--------------------------------

    Attachment:     (was: HIVE-3277.patch)
    
> Enable Metastore audit logging for non-secure connections
> ---------------------------------------------------------
>
>                 Key: HIVE-3277
>                 URL: https://issues.apache.org/jira/browse/HIVE-3277
>             Project: Hive
>          Issue Type: Improvement
>          Components: Logging, Metastore, Security
>            Reporter: Carl Steinbach
>            Assignee: Sean Mackrory
>         Attachments: HIVE-3277.patch.1
>
>


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Commented] (HIVE-3277) Enable Metastore audit logging for non-secure connections

Posted by "Harsh J (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HIVE-3277?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13442241#comment-13442241 ] 

Harsh J commented on HIVE-3277:
-------------------------------

Hi Carl,

We do get some audit logging in unsecure mode but it lacks info I think. Isn't this done already via HIVE-2797?
                
> Enable Metastore audit logging for non-secure connections
> ---------------------------------------------------------
>
>                 Key: HIVE-3277
>                 URL: https://issues.apache.org/jira/browse/HIVE-3277
>             Project: Hive
>          Issue Type: Improvement
>          Components: Logging, Metastore, Security
>            Reporter: Carl Steinbach
>


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (HIVE-3277) Enable Metastore audit logging for non-secure connections

Posted by "Sean Mackrory (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/HIVE-3277?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sean Mackrory updated HIVE-3277:
--------------------------------

    Resolution: Fixed
        Status: Resolved  (was: Patch Available)
    
> Enable Metastore audit logging for non-secure connections
> ---------------------------------------------------------
>
>                 Key: HIVE-3277
>                 URL: https://issues.apache.org/jira/browse/HIVE-3277
>             Project: Hive
>          Issue Type: Improvement
>          Components: Logging, Metastore, Security
>            Reporter: Carl Steinbach
>            Assignee: Sean Mackrory
>         Attachments: HIVE-3277.patch.1, HIVE-3277.patch.2
>
>


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (HIVE-3277) Enable Metastore audit logging for non-secure connections

Posted by "Sean Mackrory (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/HIVE-3277?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sean Mackrory updated HIVE-3277:
--------------------------------

    Attachment: HIVE-3277.patch.2

Second patch fixes a code style issue
                
> Enable Metastore audit logging for non-secure connections
> ---------------------------------------------------------
>
>                 Key: HIVE-3277
>                 URL: https://issues.apache.org/jira/browse/HIVE-3277
>             Project: Hive
>          Issue Type: Improvement
>          Components: Logging, Metastore, Security
>            Reporter: Carl Steinbach
>            Assignee: Sean Mackrory
>         Attachments: HIVE-3277.patch.1, HIVE-3277.patch.2
>
>


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira