sentry-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "shenguoquan (JIRA)" <>
Subject [jira] [Commented] (SENTRY-357) Not able to read policy files on HDFS for Solr
Date Fri, 05 Dec 2014 02:27:12 GMT


shenguoquan commented on SENTRY-357:

Hi [~prasadm] [~gchanan], The failed hive test is TestHDFSIntegration.testEnd2End. I explain
the reason why the test is failed(see the above). In my opinion, the location of loading policy
file for the LocalGroupMappingService is judged from the configuration. For example. when
the parameter fs.defaultFS is set hdfs://..., it should be load policy file from HDFS. In
the current source code of sentry, The LocalGroupMappingService get the configuration just
as following:
{code}configuration=new Configuration(){code}
May be it is doesn't matter for hive, because the core-site.xml and hdfs-site.xml are on the
classpath. But it is not the situation for Solr. Solr has no chance to judge from configuration
where the location is. The classpath for Solr has not the core-site.xml,hdfs-site.xml. If
sentry.solr.provider.resource=/user/solr/sentry/sentry-provider.ini is set, LocalGroupMappingService
in the Solr doesn't judge where it is, hdfs or localFilesystem. So it will default load the
file from localFileSystem. Why the the jira fired.

> Not able to read policy files on HDFS for Solr
> ----------------------------------------------
>                 Key: SENTRY-357
>                 URL:
>             Project: Sentry
>          Issue Type: Bug
>    Affects Versions: 1.4.0
>            Reporter: Nishant Gupta
>            Assignee: shenguoquan
>            Priority: Blocker
>             Fix For: 1.5.0
>         Attachments: SENTRY-357.002.patch, SENTRY-357.003.patch, SENTRY-357.patch
> Using Cloudera CDH 4.7 packaged with sentry(incubating) 1.1.0+22. Unable to enable Sentry
authorization for Solr. Though the policy file is there on HDFS with required permissions
to solr user it gives the error while SolrAuthzBinding
> File /user/solr/sentry/sentry-provider.ini does not exist

This message was sent by Atlassian JIRA

View raw message