-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/22443/
-----------------------------------------------------------
(Updated June 11, 2014, 4:18 a.m.)
Review request for sentry.
Changes
-------
refactored the patch to get rid of the FilterTransport from Hive. Tested on
secure cluster.
Bugs: SENTRY-289
https://issues.apache.org/jira/browse/SENTRY-289
Repository: sentry
Description
-------
The Sentry client started by HS2 or metastore needs to wrapp the transport open
as privileged action of the current UGI. This allows the SASL negotiation to
access the kerberos ticket for authentication.
Diffs (updated)
-----
sentry-binding/sentry-binding-hive/src/main/java/org/apache/sentry/binding/hive/HiveAuthzBindingHook.java
812f310
sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/provider/db/service/thrift/SentryPolicyServiceClient.java
c41f8b9
sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/service/thrift/KerberosConfiguration.java
203858e
sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/service/thrift/ServiceConstants.java
4a2b900
sentry-provider/sentry-provider-db/src/test/java/org/apache/sentry/service/thrift/SentryServiceIntegrationBase.java
61bdfed
Diff: https://reviews.apache.org/r/22443/diff/
Testing
-------
Manually tested the secure connection from HS2.
Thanks,
Prasad Mujumdar
