You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hive.apache.org by dilli dorai <di...@gmail.com> on 2014/10/01 23:13:16 UTC

Re: Review Request 19880: HiveServer2 needs to map kerberos name to local name before proxy check

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/19880/
-----------------------------------------------------------

(Updated Oct. 1, 2014, 9:13 p.m.)


Review request for hive, Thejas Nair and Vaibhav Gumashta.


Changes
-------

patch using org.apache.hadoop.security.authentication.util.KerberosName


Bugs: HIVE-6799
    https://issues.apache.org/jira/browse/HIVE-6799


Repository: hive-git


Description
-------

see hive jira https://issues.apache.org/jira/browse/HIVE-6799


Diffs (updated)
-----

  service/src/java/org/apache/hive/service/auth/HiveAuthFactory.java a0f7667 

Diff: https://reviews.apache.org/r/19880/diff/


Testing
-------

Before the patch

Hive Server2 log file reported exception with message
Failed to validate proxy privilage of knox/hdps.example.com for sam

The intermediary service with kerberos principal name knox/hdps.example.com was not able to proxy user sam.

After the patch.
Hive Server2 log does not  reported exception.

The intermediary service with kerberos principal name knox/hdps.example.com was able to proxy user sam and create table as sam.


Thanks,

dilli dorai


Re: Review Request 19880: HiveServer2 needs to map kerberos name to local name before proxy check

Posted by Vaibhav Gumashta <vg...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/19880/#review55137
-----------------------------------------------------------

Ship it!


Ship It!

- Vaibhav Gumashta


On Oct. 1, 2014, 9:13 p.m., dilli dorai wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/19880/
> -----------------------------------------------------------
> 
> (Updated Oct. 1, 2014, 9:13 p.m.)
> 
> 
> Review request for hive, Thejas Nair and Vaibhav Gumashta.
> 
> 
> Bugs: HIVE-6799
>     https://issues.apache.org/jira/browse/HIVE-6799
> 
> 
> Repository: hive-git
> 
> 
> Description
> -------
> 
> see hive jira https://issues.apache.org/jira/browse/HIVE-6799
> 
> 
> Diffs
> -----
> 
>   service/src/java/org/apache/hive/service/auth/HiveAuthFactory.java a0f7667 
> 
> Diff: https://reviews.apache.org/r/19880/diff/
> 
> 
> Testing
> -------
> 
> Before the patch
> 
> Hive Server2 log file reported exception with message
> Failed to validate proxy privilage of knox/hdps.example.com for sam
> 
> The intermediary service with kerberos principal name knox/hdps.example.com was not able to proxy user sam.
> 
> After the patch.
> Hive Server2 log does not  reported exception.
> 
> The intermediary service with kerberos principal name knox/hdps.example.com was able to proxy user sam and create table as sam.
> 
> 
> Thanks,
> 
> dilli dorai
> 
>