[jira] [Assigned] (RANGER-5116) Ranger plugin to support configurations to initialize kerberos identity

["Madhan Neethiraj (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/RANGER-5116?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Madhan Neethiraj reassigned RANGER-5116:
----------------------------------------

    Assignee: Madhan Neethiraj

> Ranger plugin to support configurations to initialize kerberos identity
> -----------------------------------------------------------------------
>
>                 Key: RANGER-5116
>                 URL: https://issues.apache.org/jira/browse/RANGER-5116
>             Project: Ranger
>          Issue Type: Improvement
>          Components: plugins
>            Reporter: Madhan Neethiraj
>            Assignee: Madhan Neethiraj
>            Priority: Major
>
> In deployments using Kerberos to authenticate with Ranger admin server, Ranger plugins use the Kerberos identity returned by UserGroupInformation.getLoginUser() to authenticate with Ranger admin server. This identity is also used by HDFS audit write to authenticate with HDFS services.
> Ranger plugin relies on its host service (like HDFS, Hive, HBase, Knox, Impala) to establish the identity in UserGroupInformation. To support services that don't use UserGroupInformation (like Trino), the plugin should be enhanced to initialize Kerberos identity from its configurations.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)