[jira] [Updated] (SENTRY-388) Solr Binding initKerberos should use supplied Configuration

["Gregory Chanan (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SENTRY-388?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Gregory Chanan updated SENTRY-388:
----------------------------------

    Attachment: SENTRY-388.patch

> Solr Binding initKerberos should use supplied Configuration
> -----------------------------------------------------------
>
>                 Key: SENTRY-388
>                 URL: https://issues.apache.org/jira/browse/SENTRY-388
>             Project: Sentry
>          Issue Type: Bug
>    Affects Versions: 1.3.0
>            Reporter: Gregory Chanan
>            Assignee: Gregory Chanan
>         Attachments: SENTRY-388.patch
>
>
> Sentry communicates with secure HDFS by creating a new Configuration object:
> https://github.com/apache/incubator-sentry/blob/3be10df92c92e39e4d91ff2114f3f72783926e82/sentry-binding/sentry-binding-solr/src/main/java/org/apache/sentry/binding/solr/authz/SolrAuthzBinding.java#L185
> The issue with that is when its used to set the UserGroupInformation configuration, it overwrites the existing configuration, which may have other (server) settings like kerberos rules.  Ideally there would be separate client/servers interfaces, but lacking that, we need to use the passed in configuration.



--
This message was sent by Atlassian JIRA
(v6.2#6252)