This is an automated email from the ASF dual-hosted git repository.
sammichen pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ozone.git
The following commit(s) were added to refs/heads/master by this push:
new 0fb5e50a5e HDDS-11587. Ozone Manager not processing file put requests
with multi-tenancy enabled (#7316)
0fb5e50a5e is described below
commit 0fb5e50a5ebf1a6a4e46cb4585c0d829e65cc054
Author: Sammi Chen <[email protected]>
AuthorDate: Tue Nov 5 17:27:09 2024 +0800
HDDS-11587. Ozone Manager not processing file put requests with
multi-tenancy enabled (#7316)
---
.../multitenant/RangerClientMultiTenantAccessController.java | 12 +++++++++---
1 file changed, 9 insertions(+), 3 deletions(-)
diff --git
a/hadoop-ozone/ozone-manager/src/main/java/org/apache/hadoop/ozone/om/multitenant/RangerClientMultiTenantAccessController.java
b/hadoop-ozone/ozone-manager/src/main/java/org/apache/hadoop/ozone/om/multitenant/RangerClientMultiTenantAccessController.java
index 4aae4d9a77..31892199bf 100644
---
a/hadoop-ozone/ozone-manager/src/main/java/org/apache/hadoop/ozone/om/multitenant/RangerClientMultiTenantAccessController.java
+++
b/hadoop-ozone/ozone-manager/src/main/java/org/apache/hadoop/ozone/om/multitenant/RangerClientMultiTenantAccessController.java
@@ -130,9 +130,15 @@ public class RangerClientMultiTenantAccessController
implements
LOG.info("authType = {}, login user = {}", authType, usernameOrPrincipal);
- client = new RangerClient(rangerHttpsAddress,
- authType, usernameOrPrincipal, passwordOrKeytab,
- rangerServiceName, OzoneConsts.OZONE);
+ UserGroupInformation loginUser = UserGroupInformation.getLoginUser();
+ try {
+ client = new RangerClient(rangerHttpsAddress,
+ authType, usernameOrPrincipal, passwordOrKeytab,
+ rangerServiceName, OzoneConsts.OZONE);
+ } finally {
+ // set back the expected login user
+ UserGroupInformation.setLoginUser(loginUser);
+ }
// Whether or not the Ranger credentials are valid is unknown right after
// RangerClient initialization here. Because RangerClient does not perform
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
