[
https://issues.apache.org/jira/browse/HBASE-9866?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Devaraj Das updated HBASE-9866:
-------------------------------
Resolution: Fixed
Release Note: hbase.rest.support.proxyuser when set to true would enable
enable proxy-user support in the REST server. Like any other server, e.g.,
NameNode, which supports proxy user mode, appropriate proxy-user configuration
needs to be set as well in the REST server (hadoop.proxyuser.$user.hosts,
hadoop.proxyuser.$user.groups). Requests can then be made to the REST server
with a 'doAs' in the query string url and if proxy user authorization check
passes, the query will be executed as the 'doAs' user.
Status: Resolved (was: Patch Available)
Committed.
> Support the mode where REST server authorizes proxy users
> ---------------------------------------------------------
>
> Key: HBASE-9866
> URL: https://issues.apache.org/jira/browse/HBASE-9866
> Project: HBase
> Issue Type: Improvement
> Reporter: Devaraj Das
> Assignee: Devaraj Das
> Fix For: 0.98.0, 0.99.0
>
> Attachments: 9866-1.txt, 9866-2.txt, 9866-3.txt, 9866-4.txt,
> 9866-4.txt
>
>
> In one use case, someone was trying to authorize with the REST server as a
> proxy user. That mode is not supported today.
> The curl request would be something like (assuming SPNEGO auth) -
> {noformat}
> curl -i --negotiate -u : http://<HOST>:<PORT>/version/cluster?doas=<USER>
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.1.4#6159)
