You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@phoenix.apache.org by "xucgod@gmail.com" <xu...@gmail.com> on 2018/08/28 09:15:13 UTC
Phoenix Query Server Impersonation With Non-Kerberos HBase
Hello,
I am new to Phoenix, and I want to know does Phoenix Query Server support Impersonation with Non-Kerberos HBase cluster?
I have been configured the Phoenix and Hadoop follow this:http://phoenix.apache.org/server.html, and started Phoenix Query Server by user hue. But when I use the command line:sqlline-thin.py http://localhost:8765?doAs=aaa, it still connects to HBase with user hue instead of the user aaa what I want.
So, I want to know does Phoenix support Query Server Impersonation with Non-Kerberos case, or did I miss any configuration?
Thanks in advance for your suggestions.
xucgod@gmail.com
Re: Phoenix Query Server Impersonation With Non-Kerberos HBase
Posted by Josh Elser <el...@apache.org>.
In released versions of Apache Phoenix, there are only two
authentication models for PQS: None and Kerberos via SPNEGO.
Our Karan and Alex have been doing some good work (in what is presently
slated to be 4.15.0 and 5.1.0) around allowing pluggable authentication
and authorization as a part of PQS.
Abstractly, Avatica (the tech PQS builds on) gives API that would be
sufficient for you to build what you are asking for, but this has not
been tied with a bow for you to use out of the box (as such a model must
also hinge on some external authentication service which we do not provide).
Hope that helps.
On 8/28/18 5:15 AM, xucgod@gmail.com wrote:
> Hello,
>
> I am new to Phoenix, and I want to know does Phoenix Query Server support Impersonation with
> Non-Kerberos HBase cluster?
>
> I have been configured the Phoenix and Hadoop follow this:http://phoenix.apache.org/server.html, and started Phoenix Query Server by user hue. But when I use the command line:sqlline-thin.py http://localhost:8765?doAs=aaa, it still connects to HBase with user hue instead of the user aaa what I want.
>
> So, I want to know does Phoenix support Query Server Impersonation with
> Non-Kerberos case, or did I miss any configuration?
>
> Thanks in advance for your suggestions.
>
> ------------------------------------------------------------------------
> xucgod@gmail.com