[
https://issues.apache.org/jira/browse/IMPALA-13914?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18109150#comment-18109150
]
ASF subversion and git services commented on IMPALA-13914:
----------------------------------------------------------
Commit 81937828df033d0075b8fb801a055c7fc847dc4a in impala's branch
refs/heads/master from Fang-Yu Rao
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=81937828d ]
IMPALA-13914: Revise configuration files of Ranger after RANGER-4445
According to the suggestion by Madhan Neethiraj from Apache Ranger,
this patch revises the configuration files needed by the Ranger server
and the Ranger plug-in so that the Ranger plug-in will still be able to
make REST API calls to the Ranger server in the non-Kerberized
environment after RANGER-4445, where additional calls to
ensureAdminAccess() were added to authenticate the connected plug-in.
Specifically, in the configuration file used by the Ranger server
during startup, we comment out various API endpoints so that the Ranger
server is able to correctly associate a session id with the
corresponding plug-in instance.
In the configuration file needed by the plug-in, to allow the plug-in
to authenticate to the server, we provide the respective username and
password of the user 'admin'. Those 2 configurations were added in
RANGER-4908.
Change-Id: Ie37fa9b5ef26df92496c27bf8a340a54c760c220
Reviewed-on: http://gerrit.cloudera.org:8080/22712
Reviewed-by: Michael Smith <[email protected]>
Tested-by: Fang-Yu Rao <[email protected]>
> Revise configuration files of Ranger after RANGER-4445
> ------------------------------------------------------
>
> Key: IMPALA-13914
> URL: https://issues.apache.org/jira/browse/IMPALA-13914
> Project: IMPALA
> Issue Type: Task
> Components: Frontend
> Reporter: Fang-Yu Rao
> Assignee: Fang-Yu Rao
> Priority: Major
>
> As pointed out in RANGER-4771, we added calls to {*}ensureAdminAccess{*}() in
> {*}grantAccess{*}() and {*}revokeAccess{*}() in RANGER-4445. This prevents an
> administrator from granting and revoking privileges in the non-Kerberized
> environment. Since currently Impala's authorization-related tests still run
> in the non-Kerberized environment, we should revise configuration files of
> Ranger as a workaround once Apache Impala starts consuming a Ranger
> dependency that has RANGER-4445.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
