Anuj Phadke has submitted this change and it was merged.

Change subject: Validate the service while authorizing an internal connection
......................................................................


Validate the service while authorizing an internal connection

This patch validates the first component on an internal connection
seeking authorization. If the first component of the requesting user
does not match the first component of the principal validating it,
no authorization is given to that user.

This patch has been manually tested on a secure kerberized cluster.

Change-Id: I57f85ccda7b9004fce8206200eddfbc3c405cb7a
Reviewed-on: http://gerrit.cloudera.org:8080/2237
Reviewed-by: Sailesh Mukil <[email protected]>
Tested-by: Internal Jenkins
(cherry picked from commit 22f71f3e82151c1064bf2983dd3e9025c4cce5b3)
Reviewed-on: http://gerrit.cloudera.org:8080/2354
Reviewed-by: Juan Yu <[email protected]>
Tested-by: Anuj Phadke <[email protected]>
---
M be/src/rpc/authentication.cc
1 file changed, 27 insertions(+), 8 deletions(-)

Approvals:
  Juan Yu: Looks good to me, approved
  Anuj Phadke: Verified



-- 
To view, visit http://gerrit.cloudera.org:8080/2354
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I57f85ccda7b9004fce8206200eddfbc3c405cb7a
Gerrit-PatchSet: 2
Gerrit-Project: Impala
Gerrit-Branch: cdh5-2.2.0_5.4.x
Gerrit-Owner: Anuj Phadke <[email protected]>
Gerrit-Reviewer: Anuj Phadke <[email protected]>
Gerrit-Reviewer: Henry Robinson <[email protected]>
Gerrit-Reviewer: Internal Jenkins
Gerrit-Reviewer: Juan Yu <[email protected]>
Gerrit-Reviewer: Sailesh Mukil <[email protected]>

Reply via email to