Madhan Neethiraj created RANGER-5116:
----------------------------------------

             Summary: Ranger plugin to support configurations to initialize 
kerberos identity
                 Key: RANGER-5116
                 URL: https://issues.apache.org/jira/browse/RANGER-5116
             Project: Ranger
          Issue Type: Improvement
          Components: plugins
            Reporter: Madhan Neethiraj


In deployments using Kerberos to authenticate with Ranger admin server, Ranger 
plugins use the Kerberos identity returned by 
UserGroupInformation.getLoginUser() to authenticate with Ranger admin server. 
This identity is also used by HDFS audit write to authenticate with HDFS 
services.

Ranger plugin relies on its host service (like HDFS, Hive, HBase, Knox, Impala) 
to establish the identity in UserGroupInformation. To support services that 
don't use UserGroupInformation (like Trino), the plugin should be enhanced to 
initialize Kerberos identity from its configurations.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to