xBis7 commented on PR #4116:
URL: https://github.com/apache/ozone/pull/4116#issuecomment-1466565671
UPDATE: @neils-dev was right. The Ozone S3G uses a permanent connection to
the OM which masks the initial user under the special S3G user. With the above
approach, we update the `ipc/Server.Handler` which sets the metrics, but the
`ipc/Server.Reader` still holds the S3G user UGI which is used in
`DecayRpcScheduler.makeIdentity()`. Therefore, the metrics might display the
correct user but there is still no impersonation underneath it.
The approach on this PR, will need some additional changes in order to work.
I'll leave it as a draft while I'm working on a fix.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
