drill-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Akihiko Kusanagi <akusan...@maprtech.com>
Subject Impersonation with Drill Web Console or REST API
Date Wed, 21 Dec 2016 18:08:29 GMT
Hi,

The 'Impersonation Support' table In the following page says that
impersonation
is not supported with Drill Web Console or REST API.
http://drill.apache.org/docs/configuring-user-impersonation/

However, when authentication and impersonation are enabled, impersonation is
in effect through Web UI.

$ cat drill-override.conf
...
drill.exec: {
...
 impersonation: {
   enabled: true
 },
...

Only mapr user has read permission for nation.parquet, and Drillbit is
running as mapr user.

$ hadoop fs -ls /sample-data
...
drwx------   - mapr mapr       1210 2016-01-11 19:58 nation.parquet
...

Then, login as the other user via Drill Web UI, and run this query:

select * from dfs.`/sample-data/nation.parquet`

This returns the following error, so it seems that impersonation is in
effect.

Query Failed: An Error Occurred
org.apache.drill.common.exceptions.UserRemoteException: SYSTEM ERROR:
IOException: 2049.177.8452826 /sample-data/nation.parquet (Input/output
error) Fragment 0:0 [Error Id: 91684467-8a4f-4fb8-8ad7-6ee04b7f8f53 on
node3:31010]

When drill.exec.impersonation.enabled = false, the query above returns
multiple rows.

Is this expected behavior? Does the document need to be updated?

Thanks,
Aki

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message