Repository: hive Updated Branches: refs/heads/branch-1 35e714304 -> 0d9689657
HIVE-12688 : HIVE-11826 makes hive unusable in properly secured cluster (Thejas Nair, reviewed by Ashutosh Chauhan) Project: http://git-wip-us.apache.org/repos/asf/hive/repo Commit: http://git-wip-us.apache.org/repos/asf/hive/commit/0d968965 Tree: http://git-wip-us.apache.org/repos/asf/hive/tree/0d968965 Diff: http://git-wip-us.apache.org/repos/asf/hive/diff/0d968965 Branch: refs/heads/branch-1 Commit: 0d968965742379e629328c56d8c3ed578eac2a82 Parents: 35e7143 Author: Thejas Nair <[email protected]> Authored: Thu Dec 17 15:57:20 2015 -0800 Committer: Thejas Nair <[email protected]> Committed: Thu Dec 17 15:57:20 2015 -0800 ---------------------------------------------------------------------- .../org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java | 4 ---- .../org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java | 3 --- 2 files changed, 7 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/hive/blob/0d968965/itests/hive-unit-hadoop2/src/test/java/org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java ---------------------------------------------------------------------- diff --git a/itests/hive-unit-hadoop2/src/test/java/org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java b/itests/hive-unit-hadoop2/src/test/java/org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java index 40b161a..00a768e 100644 --- a/itests/hive-unit-hadoop2/src/test/java/org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java +++ b/itests/hive-unit-hadoop2/src/test/java/org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java @@ -226,10 +226,6 @@ public class TestHadoopAuthBridge23 extends TestCase { public void testSaslWithHiveMetaStore() throws Exception { setup(); - - final String proxyUserName = UserGroupInformation.getCurrentUser().getShortUserName(); - setGroupsInConf(new String[] {"*"}, proxyUserName); - UserGroupInformation clientUgi = UserGroupInformation.getCurrentUser(); obtainTokenAndAddIntoUGI(clientUgi, null); obtainTokenAndAddIntoUGI(clientUgi, "tokenForFooTablePartition"); http://git-wip-us.apache.org/repos/asf/hive/blob/0d968965/shims/common/src/main/java/org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java ---------------------------------------------------------------------- diff --git a/shims/common/src/main/java/org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java b/shims/common/src/main/java/org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java index 984679f..165cb6b 100644 --- a/shims/common/src/main/java/org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java +++ b/shims/common/src/main/java/org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java @@ -671,9 +671,6 @@ public class HadoopThriftAuthBridge { if (useProxy) { clientUgi = UserGroupInformation.createProxyUser( endUser, UserGroupInformation.getLoginUser()); - - ProxyUsers.authorize(clientUgi, getRemoteAddress().getHostAddress(), null); - remoteUser.set(clientUgi.getShortUserName()); LOG.debug("Set remoteUser :" + remoteUser.get()); return clientUgi.doAs(new PrivilegedExceptionAction<Boolean>() {
