[
https://issues.apache.org/jira/browse/HBASE-4460?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13112971#comment-13112971
]
Gary Helmling commented on HBASE-4460:
--------------------------------------
.bq Open to your feedback on what I can do to better integrate with security
stuff but not sure what I can do at this point.
For the current patch on HBASE-4099, I think not much other than make sure we
have a way of flagging that the ThriftServer is embedded so we skip the login.
Though in that case I can't picture wanting to do embedded thrift + security at
the same time, since all thrift clients would have effective access as the
region server process user (circumventing security).
The embedded thrift server + login + security might all work together if we:
* add a User.loginAndReturnUser() variant that delegates to
UserGroupInformation.loginUserFromKeytabAndReturnUGI(), then returns a wrapping
User instance
* call this method on startup for the embedded thrift server to get the thrift
user instance
* use User.runAs() to execute the body of HRegionThriftServer.run() as the
logged in thrift user
In any case, all of that seems like it should go in a separate JIRA.
> Support running an embedded ThriftServer within a RegionServer
> --------------------------------------------------------------
>
> Key: HBASE-4460
> URL: https://issues.apache.org/jira/browse/HBASE-4460
> Project: HBase
> Issue Type: New Feature
> Components: regionserver, thrift
> Reporter: Jonathan Gray
> Assignee: Jonathan Gray
> Attachments: HBASE-4460-v1.patch
>
>
> Rather than a separate process, it can be advantageous in some situations for
> each RegionServer to embed their own ThriftServer. This allows each embedded
> ThriftServer to short-circuit any queries that should be executed on the
> local RS and skip the extra hop. This then enables the building of fat
> Thrift clients that cache region locations and avoid extra hops all together.
> This JIRA is just about the embedded ThriftServer. Will open others for the
> rest.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
