You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2020/11/09 14:01:00 UTC

[jira] [Commented] (NIFI-7954) HBase_*_ClientService should wrap calls in getUgi().doAs

    [ https://issues.apache.org/jira/browse/NIFI-7954?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17228607#comment-17228607 ] 

ASF subversion and git services commented on NIFI-7954:
-------------------------------------------------------

Commit 940bc3056cc59fc54e59c50084d942d667f95a46 in nifi's branch refs/heads/main from tpalfy
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=940bc30 ]

NIFI-7954 Wrapping HBase_*_ClientService calls in getUgi().doAs() (#4629)

* NIFI-7954 Wrapping HBase_*_ClientService calls in getUgi().doAs() and taking care of TGT renewal.

* NIFI-7954 Simplified SecurityUtil.callWithUgi a little.

* NIFI-7954 Simplified SecurityUtil.callWithUgi more.

* NIFI-7954 Removed unnecessary code.

> HBase_*_ClientService should wrap calls in getUgi().doAs
> --------------------------------------------------------
>
>                 Key: NIFI-7954
>                 URL: https://issues.apache.org/jira/browse/NIFI-7954
>             Project: Apache NiFi
>          Issue Type: Improvement
>          Components: Extensions
>            Reporter: Tamas Palfy
>            Assignee: Tamas Palfy
>            Priority: Major
>          Time Spent: 2h
>  Remaining Estimate: 0h
>
> Kerberos ticket renewal is not handled by the underlying layers so not only the connection _creation_ but it's _usage_ should be done via {{getUgi().doAs}} as it checks and renews tickets as needed.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)