[ 
https://issues.apache.org/jira/browse/KNOX-1098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16687414#comment-16687414
 ] 

Kevin Risden commented on KNOX-1098:
------------------------------------

New patch uses "SubjectUtils.getCurrentEffectivePrincipalName()" instead of 
request.getRemoteUser(). This works with the tokens as well instead of relying 
on the http request user only. It would be good to add a test for this somehow.

[~jesus.alv] - would appreciate testing the latest patch when you get a chance 
:) Thanks!

> Livy proxyUser should be added when not present
> -----------------------------------------------
>
>                 Key: KNOX-1098
>                 URL: https://issues.apache.org/jira/browse/KNOX-1098
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>    Affects Versions: 0.14.0, 1.0.0, 1.1.0
>            Reporter: Jeffrey Rodriguez
>            Assignee: Kevin Risden
>            Priority: Major
>              Labels: livy
>             Fix For: 1.2.0
>
>         Attachments: KNOX-1098.patch, KNOX-1098.patch, KNOX-1098.patch
>
>
> Current Knox Livy service will replace the value pair proxyUser, user to 
> impersonate when running the job , with the value of the user that Knox has 
> authenticated. If the proxyUser value pair doesn't exist the rewrite rule 
> will not add the proxyUser value pair.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to