Repository: ambari Updated Branches: refs/heads/trunk b69c3008a -> 6168a47ad
AMBARI-17641. Add storm impersonation authorized along with default ACL. (addendum patch) (jaimin) Project: http://git-wip-us.apache.org/repos/asf/ambari/repo Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/6168a47a Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/6168a47a Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/6168a47a Branch: refs/heads/trunk Commit: 6168a47adec2970731778d28ca255978f1345a49 Parents: b69c300 Author: Jaimin Jetly <[email protected]> Authored: Mon Jul 18 14:39:13 2016 -0700 Committer: Jaimin Jetly <[email protected]> Committed: Mon Jul 18 14:40:11 2016 -0700 ---------------------------------------------------------------------- .../common-services/STORM/1.0.1/configuration/storm-site.xml | 2 -- 1 file changed, 2 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/ambari/blob/6168a47a/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml b/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml index 31daf75..d4ca263 100644 --- a/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml +++ b/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml @@ -85,7 +85,6 @@ </property> <property> <name>nimbus.impersonation.authorizer</name> - <value/> <description> To ensure only authorized users can perform impersonation you should start nimbus with nimbus.impersonation.authorizer set to org.apache.storm.security.auth.authorizer.ImpersonationAuthorizer. A storm client may submit requests on behalf of another user. For example, if a userX submits an oozie workflow and as part of workflow execution if user oozie wants to submit a topology on behalf of userX it can do so by leveraging the impersonation feature.In order to submit topology as some other user , you can use StormSubmitter.submitTopologyAs API. Alternatively you can use NimbusClient.getConfiguredClientAs to get a nimbus client as some other user and perform any nimbus action(i.e. kill/rebalance/activate/deactivate) using this client. @@ -93,7 +92,6 @@ </property> <property> <name>nimbus.impersonation.acl</name> - <value/> <description> The ImpersonationAuthorizer uses nimbus.impersonation.acl as the acl to authorize users. Following is a sample nimbus config for supporting impersonation: nimbus.impersonation.acl:
