Repository: ambari Updated Branches: refs/heads/branch-2.4 5103939ab -> 245776a77
AMBARI-17641. Add storm impersonation authorized along with default ACL. (addendum patch) (jaimin) Project: http://git-wip-us.apache.org/repos/asf/ambari/repo Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/245776a7 Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/245776a7 Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/245776a7 Branch: refs/heads/branch-2.4 Commit: 245776a774a842ef3ff037ff7b11a79c12d2b5bf Parents: 5103939 Author: Jaimin Jetly <[email protected]> Authored: Mon Jul 18 14:39:13 2016 -0700 Committer: Jaimin Jetly <[email protected]> Committed: Mon Jul 18 14:39:13 2016 -0700 ---------------------------------------------------------------------- .../common-services/STORM/1.0.1/configuration/storm-site.xml | 2 -- 1 file changed, 2 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/ambari/blob/245776a7/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml b/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml index 31daf75..d4ca263 100644 --- a/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml +++ b/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml @@ -85,7 +85,6 @@ </property> <property> <name>nimbus.impersonation.authorizer</name> - <value/> <description> To ensure only authorized users can perform impersonation you should start nimbus with nimbus.impersonation.authorizer set to org.apache.storm.security.auth.authorizer.ImpersonationAuthorizer. A storm client may submit requests on behalf of another user. For example, if a userX submits an oozie workflow and as part of workflow execution if user oozie wants to submit a topology on behalf of userX it can do so by leveraging the impersonation feature.In order to submit topology as some other user , you can use StormSubmitter.submitTopologyAs API. Alternatively you can use NimbusClient.getConfiguredClientAs to get a nimbus client as some other user and perform any nimbus action(i.e. kill/rebalance/activate/deactivate) using this client. @@ -93,7 +92,6 @@ </property> <property> <name>nimbus.impersonation.acl</name> - <value/> <description> The ImpersonationAuthorizer uses nimbus.impersonation.acl as the acl to authorize users. Following is a sample nimbus config for supporting impersonation: nimbus.impersonation.acl:
