You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ambari.apache.org by ja...@apache.org on 2016/07/18 21:35:23 UTC
ambari git commit: AMBARI-17641. Add storm impersonation authorized
along with default ACL. (addendum patch) (jaimin)
Repository: ambari
Updated Branches:
refs/heads/branch-2.4 5103939ab -> 245776a77
AMBARI-17641. Add storm impersonation authorized along with default ACL. (addendum patch) (jaimin)
Project: http://git-wip-us.apache.org/repos/asf/ambari/repo
Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/245776a7
Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/245776a7
Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/245776a7
Branch: refs/heads/branch-2.4
Commit: 245776a774a842ef3ff037ff7b11a79c12d2b5bf
Parents: 5103939
Author: Jaimin Jetly <ja...@hortonworks.com>
Authored: Mon Jul 18 14:39:13 2016 -0700
Committer: Jaimin Jetly <ja...@hortonworks.com>
Committed: Mon Jul 18 14:39:13 2016 -0700
----------------------------------------------------------------------
.../common-services/STORM/1.0.1/configuration/storm-site.xml | 2 --
1 file changed, 2 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/ambari/blob/245776a7/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml b/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml
index 31daf75..d4ca263 100644
--- a/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml
+++ b/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml
@@ -85,7 +85,6 @@
</property>
<property>
<name>nimbus.impersonation.authorizer</name>
- <value/>
<description>
To ensure only authorized users can perform impersonation you should start nimbus with nimbus.impersonation.authorizer set to org.apache.storm.security.auth.authorizer.ImpersonationAuthorizer.
A storm client may submit requests on behalf of another user. For example, if a userX submits an oozie workflow and as part of workflow execution if user oozie wants to submit a topology on behalf of userX it can do so by leveraging the impersonation feature.In order to submit topology as some other user , you can use StormSubmitter.submitTopologyAs API. Alternatively you can use NimbusClient.getConfiguredClientAs to get a nimbus client as some other user and perform any nimbus action(i.e. kill/rebalance/activate/deactivate) using this client.
@@ -93,7 +92,6 @@
</property>
<property>
<name>nimbus.impersonation.acl</name>
- <value/>
<description>
The ImpersonationAuthorizer uses nimbus.impersonation.acl as the acl to authorize users. Following is a sample nimbus config for supporting impersonation:
nimbus.impersonation.acl: