You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@impala.apache.org by "Michael Ho (JIRA)" <ji...@apache.org> on 2019/02/21 07:16:00 UTC

[jira] [Resolved] (IMPALA-8154) Disable auth_to_local by default

     [ https://issues.apache.org/jira/browse/IMPALA-8154?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Michael Ho resolved IMPALA-8154.
--------------------------------
       Resolution: Fixed
    Fix Version/s: Impala 3.2.0

> Disable auth_to_local by default
> --------------------------------
>
>                 Key: IMPALA-8154
>                 URL: https://issues.apache.org/jira/browse/IMPALA-8154
>             Project: IMPALA
>          Issue Type: Bug
>          Components: Distributed Exec
>    Affects Versions: Impala 2.12.0, Impala 3.1.0
>            Reporter: Michael Ho
>            Assignee: Michael Ho
>            Priority: Major
>             Fix For: Impala 3.2.0
>
>
> Before KRPC the local name mapping was done from the principal name entirely, however when KRPC is enabled Impala starts to use the system auth_to_local rules, "use_system_auth_to_local" is enabled by default. This can cause regression in cases where localauth is configured in the krb5.conf. This may cause issue for connection between Impalad after [this commit|https://github.com/apache/impala/commit/5c541b960491ba91533712144599fb3b6d99521d]
> The fix is to disable use_system_auth_to_local by default.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)