[jira] [Created] (IMPALA-6256) Incorrect principal will be used for internal connections if FLAGS_be_principal is set

["Sailesh Mukil (JIRA)" <ji...@apache.org>]

Sailesh Mukil created IMPALA-6256:
-------------------------------------

             Summary: Incorrect principal will be used for internal connections if FLAGS_be_principal is set
                 Key: IMPALA-6256
                 URL: https://issues.apache.org/jira/browse/IMPALA-6256
             Project: IMPALA
          Issue Type: Bug
          Components: Security
    Affects Versions: Impala 2.11.0
            Reporter: Sailesh Mukil
            Assignee: Sailesh Mukil
            Priority: Blocker


In Impala, we have FLAGS_principal and FLAGS_be_principal flags.

If only FLAGS_principal is set, we use it as both the internal and external principals.
If both FLAGS_principal and FLAGS_be_principal are set, we use FLAGS_be_principal as the internal principal and FLAGS_principal as the external principal.

However, in Kudu, they only source the internal principal from FLAGS_principal and aren't aware of a flag called FLAGS_be_principal.

So as of the time IMPALA-5129 went in, if FLAGS_be_principal is explicitly set to something different from FLAGS_principal, we would be using the external principal as the internal principal, which is incorrect.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)