You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by "Aaron T. Myers (JIRA)" <ji...@apache.org> on 2010/11/03 21:38:25 UTC

[jira] Commented: (HADOOP-6995) Allow wildcards to be used in ProxyUsers configurations

    [ https://issues.apache.org/jira/browse/HADOOP-6995?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12927991#action_12927991 ] 

Aaron T. Myers commented on HADOOP-6995:
----------------------------------------

This patch looks great, Todd. Thanks.

Would mind also adding to documentation/content/xdocs/Secure_Impersonation.xml to document the availability of this wildcard option?

> Allow wildcards to be used in ProxyUsers configurations
> -------------------------------------------------------
>
>                 Key: HADOOP-6995
>                 URL: https://issues.apache.org/jira/browse/HADOOP-6995
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.22.0
>            Reporter: Todd Lipcon
>            Assignee: Todd Lipcon
>            Priority: Minor
>         Attachments: hadoop-6995-branch20.txt, hadoop-6995.txt
>
>
> There are some cases where the full tightness of the ProxyUsers configuration is not required or available -- for example, not all users of oozie may share a common "oozie-users" group, and the operators would prefer to allow oozie on a given host to act proxy for any user. We should allow the operator to specify a wildcard for hosts or groups in the proxyuser configurations.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.