You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@kyuubi.apache.org by GitBox <gi...@apache.org> on 2022/11/09 07:15:35 UTC

[GitHub] [incubator-kyuubi] coofive commented on issue #3777: [Bug] hive is not allowed to impersonate hive

coofive commented on issue #3777:
URL: https://github.com/apache/incubator-kyuubi/issues/3777#issuecomment-1308315467

   > 
   yes,the core-site.xml has this config,and I tested with hive beeline and spark-sql,that is ok
   
   ```
   <property>
       <name>hadoop.proxyuser.oozie.hosts</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.oozie.groups</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.HTTP.hosts</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.HTTP.groups</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.hive.hosts</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.hive.groups</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.hue.hosts</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.hue.groups</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.httpfs.hosts</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.httpfs.groups</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.knox.hosts</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.knox.groups</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.livy.hosts</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.livy.groups</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.impala.hosts</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.impala.groups</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.hdfs.groups</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.hdfs.hosts</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.yarn.hosts</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.yarn.groups</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.phoenix.hosts</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.phoenix.groups</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.kudu.hosts</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.proxyuser.kudu.groups</name>
       <value>*</value>
     </property>
     <property>
       <name>hadoop.security.group.mapping</name>
       <value>org.apache.hadoop.security.ShellBasedUnixGroupsMapping</value>
     </property>
     <property>
       <name>hadoop.security.instrumentation.requires.admin</name>
       <value>false</value>
     </property>
     <property>
       <name>net.topology.script.file.name</name>
       <value>/etc/hadoop/conf.cloudera.yarn/topology.py</value>
     </property>
     <property>
       <name>io.file.buffer.size</name>
       <value>65536</value>
     </property>
     <property>
       <name>hadoop.ssl.enabled</name>
       <value>false</value>
     </property>
     <property>
       <name>hadoop.ssl.require.client.cert</name>
       <value>false</value>
       <final>true</final>
     </property>
     <property>
       <name>hadoop.ssl.keystores.factory.class</name>
       <value>org.apache.hadoop.security.ssl.FileBasedKeyStoresFactory</value>
       <final>true</final>
     </property>
     <property>
       <name>hadoop.ssl.server.conf</name>
       <value>ssl-server.xml</value>
       <final>true</final>
     </property>
     <property>
       <name>hadoop.ssl.client.conf</name>
       <value>ssl-client.xml</value>
       <final>true</final>
     </property>
     <property>
       <name>hadoop.http.cross-origin.allowed-methods</name>
       <value>GET, PUT, POST, OPTIONS, HEAD,  DELETE</value>
     </property>
     <property>
       <name>hadoop.http.cross-origin.allowed-headers</name>
       <value>X-Requested-With, Content-Type, Accept, Origin, WWW-Authenticate, Accept-Encoding, Transfer-Encoding</value>
     </property>
     <property>
       <name>hadoop.http.cross-origin.max-age</name>
       <value>180</value>
     </property>
     <property>
       <name>ipc.client.fallback-to-simple-auth-allowed</name>
       <value>true</value>
     </property>
     <property>
       <name>hadoop.proxyuser.hive.users</name>
       <value>*</value>
     </property>
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org