You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@hive.apache.org by "katty he (Jira)" <ji...@apache.org> on 2023/04/26 03:52:00 UTC

[jira] [Commented] (HIVE-18322) RetryingMetaStoreClient reconnect should not use ugi.doAs if not necessary

    [ https://issues.apache.org/jira/browse/HIVE-18322?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17716515#comment-17716515 ] 

katty he commented on HIVE-18322:
---------------------------------

this project is stucking? i also met  this problem userX is not allowed to impersonate userX

> RetryingMetaStoreClient reconnect should not use ugi.doAs if not necessary
> --------------------------------------------------------------------------
>
>                 Key: HIVE-18322
>                 URL: https://issues.apache.org/jira/browse/HIVE-18322
>             Project: Hive
>          Issue Type: Bug
>            Reporter: Thejas Nair
>            Priority: Major
>
> As commented in HIVE-17853 , RetryingMetaStoreClient should also check to see if current user is same as the original UGI user, and not do the ugi.doAs() if it is the same. Otherwise, this can potentially cause problems where the users are not privileged users (ie, there is no intent to do a "doAs").
> Without such a check, you would get errors like " userX is not allowed to impersonate userX".



--
This message was sent by Atlassian Jira
(v8.20.10#820010)