Hello Attila Bukor, Kudu Jenkins, Andrew Wong, Adar Dembo, Grant Henke,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/15414
to look at the new patch set (#4).
Change subject: [java] fix Kudu Ranger plugin when Ranger is Kerberized
......................................................................
[java] fix Kudu Ranger plugin when Ranger is Kerberized
Kudu Ranger plugin currently failed to connect to the Ranger service if
it is Kerberized. This patch fixes it by login 'kudu' user via calling
UserGroupInformation.loginUserFromKeytab, since Ranger client-side
library RangerAdminRESTClient uses UserGroupInformation to determine if
Kerberos is enabled. Note that the Ranger client side library also handles
Kerberos re-login/renewal via calling
UserGroupInformation.checkTGTAndReloginFromKeytab.
This patch also introduces two new properties 'principal' and 'keytab'
in SubprocessConfiguration as they are generic enough for other subprocess
type to use as well.
Change-Id: Ibe043293ea9cc1c2f43a331603dc1e3b36ff6ae0
---
M
java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/KuduSubprocessException.java
M
java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/SubprocessConfiguration.java
M
java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/SubprocessExecutor.java
M
java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/echo/EchoSubprocessMain.java
M
java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/ranger/RangerProtocolHandler.java
M
java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/ranger/RangerSubprocessMain.java
M
java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/ranger/authorization/RangerKuduAuthorizer.java
M
java/kudu-subprocess/src/test/java/org/apache/kudu/subprocess/echo/TestEchoSubprocess.java
M
java/kudu-subprocess/src/test/java/org/apache/kudu/subprocess/ranger/TestRangerSubprocess.java
9 files changed, 102 insertions(+), 20 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/14/15414/4
--
To view, visit http://gerrit.cloudera.org:8080/15414
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: Ibe043293ea9cc1c2f43a331603dc1e3b36ff6ae0
Gerrit-Change-Number: 15414
Gerrit-PatchSet: 4
Gerrit-Owner: Hao Hao <[email protected]>
Gerrit-Reviewer: Adar Dembo <[email protected]>
Gerrit-Reviewer: Andrew Wong <[email protected]>
Gerrit-Reviewer: Attila Bukor <[email protected]>
Gerrit-Reviewer: Grant Henke <[email protected]>
Gerrit-Reviewer: Hao Hao <[email protected]>
Gerrit-Reviewer: Kudu Jenkins (120)
