Repository: hive Updated Branches: refs/heads/master df7f6fe49 -> 783a35a42
HIVE-12688 : HIVE-11826 makes hive unusable in properly secured cluster (Thejas Nair, reviewed by Ashutosh Chauhan) Project: http://git-wip-us.apache.org/repos/asf/hive/repo Commit: http://git-wip-us.apache.org/repos/asf/hive/commit/783a35a4 Tree: http://git-wip-us.apache.org/repos/asf/hive/tree/783a35a4 Diff: http://git-wip-us.apache.org/repos/asf/hive/diff/783a35a4 Branch: refs/heads/master Commit: 783a35a42754ba6b0e074d6646483f11fb39e42b Parents: df7f6fe Author: Thejas Nair <[email protected]> Authored: Thu Dec 17 15:57:20 2015 -0800 Committer: Thejas Nair <[email protected]> Committed: Thu Dec 17 15:57:47 2015 -0800 ---------------------------------------------------------------------- .../org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java | 4 ---- .../org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java | 3 --- 2 files changed, 7 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/hive/blob/783a35a4/itests/hive-unit-hadoop2/src/test/java/org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java ---------------------------------------------------------------------- diff --git a/itests/hive-unit-hadoop2/src/test/java/org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java b/itests/hive-unit-hadoop2/src/test/java/org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java index ff56f80..6d0776a 100644 --- a/itests/hive-unit-hadoop2/src/test/java/org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java +++ b/itests/hive-unit-hadoop2/src/test/java/org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java @@ -225,10 +225,6 @@ public class TestHadoopAuthBridge23 extends TestCase { public void testSaslWithHiveMetaStore() throws Exception { setup(); - - final String proxyUserName = UserGroupInformation.getCurrentUser().getShortUserName(); - setGroupsInConf(new String[] {"*"}, proxyUserName); - UserGroupInformation clientUgi = UserGroupInformation.getCurrentUser(); obtainTokenAndAddIntoUGI(clientUgi, null); obtainTokenAndAddIntoUGI(clientUgi, "tokenForFooTablePartition"); http://git-wip-us.apache.org/repos/asf/hive/blob/783a35a4/shims/common/src/main/java/org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java ---------------------------------------------------------------------- diff --git a/shims/common/src/main/java/org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java b/shims/common/src/main/java/org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java index d2b47be..6fe5969 100644 --- a/shims/common/src/main/java/org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java +++ b/shims/common/src/main/java/org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java @@ -670,9 +670,6 @@ public abstract class HadoopThriftAuthBridge { if (useProxy) { clientUgi = UserGroupInformation.createProxyUser( endUser, UserGroupInformation.getLoginUser()); - - ProxyUsers.authorize(clientUgi, getRemoteAddress().getHostAddress(), null); - remoteUser.set(clientUgi.getShortUserName()); LOG.debug("Set remoteUser :" + remoteUser.get()); return clientUgi.doAs(new PrivilegedExceptionAction<Boolean>() {
