Hi Daniel,

Yes, it is possible to use UserGroupInformation#createProxyUser in an
unsecured (simple authentication) cluster.  You'll still need to specify
in configuration which users can do impersonation, which originating hosts
those users may perform impersonation from, and which groups of other
users they may impersonate.  This configuration is documented here:

http://hadoop.apache.org/docs/r2.7.1/hadoop-project-dist/hadoop-common/Supe
rusers.html


Other projects in the Hadoop ecosystem, such as Oozie, may have additional
configuration requirements to support proxy users.  Please see the
documentation for those projects if needed.

I hope this helps.

--Chris Nauroth




On 9/3/15, 10:27 AM, "Daniel Schulz" <danielschulz2...@hotmail.com> wrote:

>Hi,
>
>When I run my Hadoop with simple authentication without a Kerberos: will
>I be able to createProxyUser / doAs in order to make a superuser act upon
>a less privileged user? Or will I catch an exception then?
>
>Thanks in advance.
>
>Kind regards, Daniel.

Reply via email to