Hello Kudu Jenkins, Andrew Wong, Adar Dembo,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/15414
to look at the new patch set (#2).
Change subject: [java] fix Kudu Ranger plugin in a Kerberized env
......................................................................
[java] fix Kudu Ranger plugin in a Kerberized env
Kudu Ranger plugin currently failed to connect to the Ranger service in
a Kerberized environment. This patch fixes it by login 'kudu' user via
calling UserGroupInformation.loginUserFromKeytab, since Ranger client-side
library RangerAdminRESTClient uses UserGroupInformation to determine if
Kerberos is enabled. Note that the Ranger client side library also handles
Kerberos re-login/renewal via calling
UserGroupInformation.checkTGTAndReloginFromKeytab.
This patch also introduces two new properties 'principal' and 'keytab'
in SubprocessConfiguration as they are generic enough for other subprocess
type to use as well.
Change-Id: Ibe043293ea9cc1c2f43a331603dc1e3b36ff6ae0
---
M
java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/KuduSubprocessException.java
M
java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/SubprocessConfiguration.java
M
java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/SubprocessExecutor.java
M
java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/echo/EchoSubprocessMain.java
M
java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/ranger/RangerProtocolHandler.java
M
java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/ranger/RangerSubprocessMain.java
M
java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/ranger/authorization/RangerKuduAuthorizer.java
M
java/kudu-subprocess/src/test/java/org/apache/kudu/subprocess/echo/TestEchoSubprocess.java
M
java/kudu-subprocess/src/test/java/org/apache/kudu/subprocess/ranger/TestRangerSubprocess.java
9 files changed, 106 insertions(+), 18 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/14/15414/2
--
To view, visit http://gerrit.cloudera.org:8080/15414
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: Ibe043293ea9cc1c2f43a331603dc1e3b36ff6ae0
Gerrit-Change-Number: 15414
Gerrit-PatchSet: 2
Gerrit-Owner: Hao Hao <[email protected]>
Gerrit-Reviewer: Adar Dembo <[email protected]>
Gerrit-Reviewer: Andrew Wong <[email protected]>
Gerrit-Reviewer: Hao Hao <[email protected]>
Gerrit-Reviewer: Kudu Jenkins (120)
