Repository: ambari Updated Branches: refs/heads/trunk 661ee4cd7 -> 185ffb53d
AMBARI-17641. Add storm impersonation authorized along with default ACL. (UT fix) (smohanty) Project: http://git-wip-us.apache.org/repos/asf/ambari/repo Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/185ffb53 Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/185ffb53 Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/185ffb53 Branch: refs/heads/trunk Commit: 185ffb53d0d11597bcfdf2b6a4315bf6fae3ede8 Parents: 661ee4c Author: Sumit Mohanty <[email protected]> Authored: Fri Jul 22 18:35:12 2016 -0700 Committer: Sumit Mohanty <[email protected]> Committed: Fri Jul 22 18:36:22 2016 -0700 ---------------------------------------------------------------------- .../common-services/STORM/1.0.1/configuration/storm-site.xml | 2 ++ 1 file changed, 2 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/ambari/blob/185ffb53/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml b/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml index d4ca263..3a3879b 100644 --- a/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml +++ b/ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml @@ -89,6 +89,7 @@ To ensure only authorized users can perform impersonation you should start nimbus with nimbus.impersonation.authorizer set to org.apache.storm.security.auth.authorizer.ImpersonationAuthorizer. A storm client may submit requests on behalf of another user. For example, if a userX submits an oozie workflow and as part of workflow execution if user oozie wants to submit a topology on behalf of userX it can do so by leveraging the impersonation feature.In order to submit topology as some other user , you can use StormSubmitter.submitTopologyAs API. Alternatively you can use NimbusClient.getConfiguredClientAs to get a nimbus client as some other user and perform any nimbus action(i.e. kill/rebalance/activate/deactivate) using this client. </description> + <on-ambari-upgrade add="false"/> </property> <property> <name>nimbus.impersonation.acl</name> @@ -106,5 +107,6 @@ groups: [comma separated list of groups whose users impersonating_user2 is allowed to impersonate] </description> + <on-ambari-upgrade add="false"/> </property> </configuration>
