Bharath Vissapragada has uploaded a new patch set (#2). Change subject: IMPALA-2660: Respect auth_to_local configs from hdfs configs ......................................................................
IMPALA-2660: Respect auth_to_local configs from hdfs configs This patch implements a new feature to read the auth_to_local configs from hdfs configuration files, using the parameter hadoop.security.auth_to_local. This is done by modifying the User#getShortName() method to use its hdfs equivalent. This patch includes an end to end authorization test using sentry where we add specific auth_to_local setting for a certain user and test if the sentry authorization passes for this user after applying these rules. Given we don't have tests that run on a kerberized min-cluster, this patch adds a hack to load this configuration during even on non-kerberized 'test runs'. Change-Id: I76485b83c14ba26f6fce66e5f83e8014667829e0 --- M fe/src/main/java/com/cloudera/impala/authorization/User.java M fe/src/test/java/com/cloudera/impala/analysis/AuthorizationTest.java M fe/src/test/resources/authz-policy.ini.template M testdata/cluster/node_templates/common/etc/hadoop/conf/core-site.xml.tmpl 4 files changed, 126 insertions(+), 17 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala refs/changes/00/2800/2 -- To view, visit http://gerrit.cloudera.org:8080/2800 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-MessageType: newpatchset Gerrit-Change-Id: I76485b83c14ba26f6fce66e5f83e8014667829e0 Gerrit-PatchSet: 2 Gerrit-Project: Impala Gerrit-Branch: cdh5-trunk Gerrit-Owner: Bharath Vissapragada <[email protected]>
