sentry-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Gregory Chanan (JIRA)" <j...@apache.org>
Subject [jira] [Created] (SENTRY-388) Solr Binding initKerberos should use supplied Configuration
Date Wed, 13 Aug 2014 20:54:11 GMT
Gregory Chanan created SENTRY-388:
-------------------------------------

             Summary: Solr Binding initKerberos should use supplied Configuration
                 Key: SENTRY-388
                 URL: https://issues.apache.org/jira/browse/SENTRY-388
             Project: Sentry
          Issue Type: Bug
    Affects Versions: 1.3.0
            Reporter: Gregory Chanan
            Assignee: Gregory Chanan


Sentry communicates with secure HDFS by creating a new Configuration object:
https://github.com/apache/incubator-sentry/blob/3be10df92c92e39e4d91ff2114f3f72783926e82/sentry-binding/sentry-binding-solr/src/main/java/org/apache/sentry/binding/solr/authz/SolrAuthzBinding.java#L185

The issue with that is when its used to set the UserGroupInformation configuration, it overwrites
the existing configuration, which may have other (server) settings like kerberos rules.  Ideally
there would be separate client/servers interfaces, but lacking that, we need to use the passed
in configuration.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message