Dan Burkert has uploaded this change for review. ( http://gerrit.cloudera.org:8080/9647
Change subject: KUDU-2259: add real user to AuthenticationCredentialsPB ...................................................................... KUDU-2259: add real user to AuthenticationCredentialsPB This commit adds the 'real user' to the authn credentials token, which is used when negotiating connections with SASL PLAIN authentication. This is useful when scan tokens are being sent to remote tasks, it's not possible to authenticate with a signed authn token to the remote server[1], coarse-grained ACLs have been set, and the 'planner' and 'executor' processes are being run with different users. This problematic scenario might also have been solved by allowing tokens to be used in all scenarios, even when encryption is disabled, but the approach taken by this commit allows that invariant to remain. [1]: this most often occurs because the remote server has encryption disabled. Change-Id: I5d2d901d42501ecfc0f6372f68cf7335eb188b45 Reviewed-on: http://gerrit.cloudera.org:8080/9374 Reviewed-by: Todd Lipcon <[email protected]> Tested-by: Kudu Jenkins (cherry picked from commit e684de3371941cc5ae8fc4a546ecda7dbe9f4f2f) --- M java/kudu-client/src/main/java/org/apache/kudu/client/Negotiator.java M java/kudu-client/src/main/java/org/apache/kudu/client/SecurityContext.java A java/kudu-client/src/test/java/org/apache/kudu/client/TestSecurityContextRealUser.java M src/kudu/client/client-internal.cc M src/kudu/client/client-internal.h M src/kudu/client/client-test.cc M src/kudu/client/client.cc M src/kudu/client/client.proto M src/kudu/client/master_rpc.cc M src/kudu/client/master_rpc.h M src/kudu/client/meta_cache.cc M src/kudu/mini-cluster/external_mini_cluster.cc M src/kudu/rpc/connection_id.cc M src/kudu/rpc/server_negotiation.cc M src/kudu/rpc/user_credentials.cc M src/kudu/rpc/user_credentials.h M src/kudu/util/user.cc 17 files changed, 236 insertions(+), 34 deletions(-) git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/47/9647/1 -- To view, visit http://gerrit.cloudera.org:8080/9647 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: branch-1.7.x Gerrit-MessageType: newchange Gerrit-Change-Id: I5d2d901d42501ecfc0f6372f68cf7335eb188b45 Gerrit-Change-Number: 9647 Gerrit-PatchSet: 1 Gerrit-Owner: Dan Burkert <[email protected]>
