Abraham Fine commented on SQOOP-3018:

Hello [~daryn]-

The credentials are not necessarily owned by the user (lets say that a DBA 
creates a link and then a user creates a job using that link).

How will the user be able to provide custom job code and alter the classpath? 
The only thing I can think of is providing a malicious jdbc driver when 
creating a link.

> Hadoop MapReduce job submission be done in client user UGI?
> -----------------------------------------------------------
>                 Key: SQOOP-3018
>                 URL: https://issues.apache.org/jira/browse/SQOOP-3018
>             Project: Sqoop
>          Issue Type: New Feature
>          Components: connectors/hdfs
>    Affects Versions: 1.99.7
>            Reporter: Yan Braun
>         Attachments: SQOOP-3018.patch
> Hdfs Connector read and write to HDFS in client user UGI when proxyUser is 
> enabled.  But MapReduce job submission is done using Sqoop user UGI, which 
> makes all jobs from different users run in Sqoop user's hadoop queue  instead 
> of client users' own queue.   
> This is a follow-up JIRA after our discussions with Abraham Fine on whether 
> this will be on sqoop2 road map in the near future.  Thanks.  

This message was sent by Atlassian JIRA

Reply via email to