Repository: hive Updated Branches: refs/heads/branch-2.0 8763cb19e -> fa1295f03
HIVE-12688 : HIVE-11826 makes hive unusable in properly secured cluster (Thejas Nair, reviewed by Ashutosh Chauhan) Project: http://git-wip-us.apache.org/repos/asf/hive/repo Commit: http://git-wip-us.apache.org/repos/asf/hive/commit/fa1295f0 Tree: http://git-wip-us.apache.org/repos/asf/hive/tree/fa1295f0 Diff: http://git-wip-us.apache.org/repos/asf/hive/diff/fa1295f0 Branch: refs/heads/branch-2.0 Commit: fa1295f033edd767caf8378bb301ab10c0ddddf9 Parents: 8763cb1 Author: Thejas Nair <[email protected]> Authored: Thu Dec 17 15:57:20 2015 -0800 Committer: Thejas Nair <[email protected]> Committed: Thu Dec 17 15:58:12 2015 -0800 ---------------------------------------------------------------------- .../org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java | 4 ---- .../org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java | 3 --- 2 files changed, 7 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/hive/blob/fa1295f0/itests/hive-unit-hadoop2/src/test/java/org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java ---------------------------------------------------------------------- diff --git a/itests/hive-unit-hadoop2/src/test/java/org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java b/itests/hive-unit-hadoop2/src/test/java/org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java index ff56f80..6d0776a 100644 --- a/itests/hive-unit-hadoop2/src/test/java/org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java +++ b/itests/hive-unit-hadoop2/src/test/java/org/apache/hadoop/hive/thrift/TestHadoopAuthBridge23.java @@ -225,10 +225,6 @@ public class TestHadoopAuthBridge23 extends TestCase { public void testSaslWithHiveMetaStore() throws Exception { setup(); - - final String proxyUserName = UserGroupInformation.getCurrentUser().getShortUserName(); - setGroupsInConf(new String[] {"*"}, proxyUserName); - UserGroupInformation clientUgi = UserGroupInformation.getCurrentUser(); obtainTokenAndAddIntoUGI(clientUgi, null); obtainTokenAndAddIntoUGI(clientUgi, "tokenForFooTablePartition"); http://git-wip-us.apache.org/repos/asf/hive/blob/fa1295f0/shims/common/src/main/java/org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java ---------------------------------------------------------------------- diff --git a/shims/common/src/main/java/org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java b/shims/common/src/main/java/org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java index d2b47be..6fe5969 100644 --- a/shims/common/src/main/java/org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java +++ b/shims/common/src/main/java/org/apache/hadoop/hive/thrift/HadoopThriftAuthBridge.java @@ -670,9 +670,6 @@ public abstract class HadoopThriftAuthBridge { if (useProxy) { clientUgi = UserGroupInformation.createProxyUser( endUser, UserGroupInformation.getLoginUser()); - - ProxyUsers.authorize(clientUgi, getRemoteAddress().getHostAddress(), null); - remoteUser.set(clientUgi.getShortUserName()); LOG.debug("Set remoteUser :" + remoteUser.get()); return clientUgi.doAs(new PrivilegedExceptionAction<Boolean>() {
