[
https://issues.apache.org/jira/browse/HAWQ-1469?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16015047#comment-16015047
]
Lin Wen edited comment on HAWQ-1469 at 5/18/17 2:50 AM:
--------------------------------------------------------
Yes. If both master RPS and standby RPS are unavailable, this message is
printed to console.
ERROR: ranger plugin service is unavailable : Couldn't connect to server.
(rangerrest.c:463)
OK. We can make the message more descriptive. how about this?
ERROR: permission is unknown due to authorization failure, ranger plugin
service is unavailable : Couldn't connect to server. (rangerrest.c:463)
was (Author: wlin):
Yes. If both master RPS and standby RPS are unavailable, this message is
printed to console.
ERROR: ranger plugin service is unavailable : Couldn't connect to server.
(rangerrest.c:463)
OK. We can make the message more descriptive. how about this?
ERROR: authorization failed, ranger plugin service is unavailable : Couldn't
connect to server. (rangerrest.c:463)
> Don't expose RPS warning messages to command line
> -------------------------------------------------
>
> Key: HAWQ-1469
> URL: https://issues.apache.org/jira/browse/HAWQ-1469
> Project: Apache HAWQ
> Issue Type: Sub-task
> Components: Security
> Reporter: Lin Wen
> Assignee: Ed Espino
> Fix For: backlog
>
>
> RPS service address exposing to end-user is not secure, and we should not
> expose it out.
> **Case 1: When master RPS is down, changing to standby RPS**
> Current behavior
> ```
> postgres=# select * from a;
> WARNING: ranger plugin service from http://test1:8432/rps is unavailable :
> Couldn't connect to server, try another http://test5:8432/rps
> ERROR: permission denied for relation(s): public.a
> ```
> Warning should be removed.
> Expected
> ```
> postgres=# select * from a;
> ERROR: permission denied for relation(s): public.a
> ```
> **Case 2: When both RPS are down, should only print that RPS is unavailable.**
> Current Behavior:
> ```
> postgres=# select * from a;
> WARNING: ranger plugin service from http://test5:8432/rps is unavailable :
> Couldn't connect to server, try another http://test1:8432/rps
> ERROR: ranger plugin service from http://test1:8432/rps is unavailable :
> Couldn't connect to server. (rangerrest.c:463)
> ```
> Expected
> ```
> postgres=# select * from a;
> ERROR: ranger plugin service is unavailable : Couldn't connect to server.
> (rangerrest.c:463)
> ```
> The warning message should be printed in cvs log file.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
