You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2018/09/24 15:19:00 UTC
[jira] [Commented] (IMPALA-7591) Use short name for setting owner.
[ https://issues.apache.org/jira/browse/IMPALA-7591?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16625965#comment-16625965 ]
ASF subversion and git services commented on IMPALA-7591:
---------------------------------------------------------
Commit 083352b1e7e39e53d7146f37d206443057778653 in impala's branch refs/heads/master from [~aholley]
[ https://git-wip-us.apache.org/repos/asf?p=impala.git;h=083352b ]
IMPALA-7591: Use short name for setting owner
This patch changes the owner to be the shortname in a Kerberized
cluster. Authorization with Sentry is done using the shortname
and Hive uses the shortname. Because object ownership privileges
are based on owner, authorization will not work with the full name.
The IOException for org.apache.impala.authorization.User.getShortName
should only ever be thrown if the format for the name is wrong.
i.e. It's actually a BadFormatString exception.
Testing:
- Ran all frontend, and e2e tests.
- Manually verified on kerberized cluster.
Change-Id: Iab392a0cd5c0bb98442e1f7ac39f470310a21f11
Reviewed-on: http://gerrit.cloudera.org:8080/11469
Reviewed-by: Impala Public Jenkins <im...@cloudera.com>
Tested-by: Impala Public Jenkins <im...@cloudera.com>
> Use short name for setting owner.
> ---------------------------------
>
> Key: IMPALA-7591
> URL: https://issues.apache.org/jira/browse/IMPALA-7591
> Project: IMPALA
> Issue Type: Bug
> Components: Frontend
> Affects Versions: Impala 3.1.0
> Reporter: Adam Holley
> Assignee: Adam Holley
> Priority: Minor
> Fix For: Impala 3.1.0
>
>
> In a Kerberos cluster, the owner is being set to user@REALM. Other components that interact with the owner, like Sentry and Hive, do not currently support that name. Additionally, the statements that contain user for Impala do not support the at symbol either.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org