[
https://issues.apache.org/jira/browse/HIVE-13391?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15256223#comment-15256223
]
Siddharth Seth commented on HIVE-13391:
---------------------------------------
Comments on the patch.
- TaskRunnerCallable has a check on taskUgi being null, at which point it falls
back to current behaviour. That'll never happen though since
SecurityHelper.createUgiFacatory returns a NoOpFactory if the configs are not
setup correctly.
- I think we'll need a UGI pool of sorts in this patch itself. Logging in with
kerberos credentials for every task will bring down the KDC.
- There's some additional changes to MapRecordSource - which appear to more
than simple formatting changes. Shouldn't be part of this patch.
> add an option to LLAP to use keytab to authenticate to read data
> ----------------------------------------------------------------
>
> Key: HIVE-13391
> URL: https://issues.apache.org/jira/browse/HIVE-13391
> Project: Hive
> Issue Type: Bug
> Reporter: Sergey Shelukhin
> Assignee: Sergey Shelukhin
> Attachments: HIVE-13391.01.patch, HIVE-13391.02.patch,
> HIVE-13391.03.patch, HIVE-13391.04.patch, HIVE-13391.05.patch,
> HIVE-13391.patch
>
>
> This can be used for non-doAs case to allow access to clients who don't
> propagate HDFS tokens.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
