[ https://issues.apache.org/jira/browse/SENTRY-662?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14341161#comment-14341161 ]
Dapeng Sun commented on SENTRY-662: ----------------------------------- Hi Prasad, I'm sorry that I'm not quite understand the jira, could you have a look at {{protected void runTestAsSubject(final TestOperation test) throws Exception}} in {{SentryServiceIntegrationBase}}? It seems the UnitTests have ran under client's subject. > SentryServiceIntegrationBase should use UGI based login > ------------------------------------------------------- > > Key: SENTRY-662 > URL: https://issues.apache.org/jira/browse/SENTRY-662 > Project: Sentry > Issue Type: Bug > Reporter: Prasad Mujumdar > Assignee: Prasad Mujumdar > Attachments: SENTRY-662.1.patch > > > With Sentry HA the service client makes the service connection on the first > client api. This is done in order to propagate the exception cleanly to the > caller. > The SentryServiceIntegrationBase currently performs direct Jaas login and > passes the subject to transport open only. Now that any API can open the > connection, this is not sufficient. > We should use the UGI login for the tests as well which handles passing the > right subject to transport level open. -- This message was sent by Atlassian JIRA (v6.3.4#6332)