Repository: ambari Updated Branches: refs/heads/branch-2.4 4986065f7 -> 11a80e3ab
AMBARI-17641. Add storm impersonation authorized along with default ACL. (UT fix) (smohanty) Project: http://git-wip-us.apache.org/repos/asf/ambari/repo Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/11a80e3a Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/11a80e3a Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/11a80e3a Branch: refs/heads/branch-2.4 Commit: 11a80e3abb724831a7ad31754426bd3533141389 Parents: 4986065 Author: Sumit Mohanty <[email protected]> Authored: Fri Jul 22 18:35:12 2016 -0700 Committer: Sumit Mohanty <[email protected]> Committed: Fri Jul 22 18:35:12 2016 -0700 ---------------------------------------------------------------------- .../common-services/STORM/1.0.1/configuration/storm-site.xml | 2 ++ 1 file changed, 2 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/ambari/blob/11a80e3a/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml b/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml index d4ca263..3a3879b 100644 --- a/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml +++ b/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml @@ -89,6 +89,7 @@ To ensure only authorized users can perform impersonation you should start nimbus with nimbus.impersonation.authorizer set to org.apache.storm.security.auth.authorizer.ImpersonationAuthorizer. A storm client may submit requests on behalf of another user. For example, if a userX submits an oozie workflow and as part of workflow execution if user oozie wants to submit a topology on behalf of userX it can do so by leveraging the impersonation feature.In order to submit topology as some other user , you can use StormSubmitter.submitTopologyAs API. Alternatively you can use NimbusClient.getConfiguredClientAs to get a nimbus client as some other user and perform any nimbus action(i.e. kill/rebalance/activate/deactivate) using this client. </description> + <on-ambari-upgrade add="false"/> </property> <property> <name>nimbus.impersonation.acl</name> @@ -106,5 +107,6 @@ groups: [comma separated list of groups whose users impersonating_user2 is allowed to impersonate] </description> + <on-ambari-upgrade add="false"/> </property> </configuration>
