sentry-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "shenguoquan (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (SENTRY-357) Not able to read policy files on HDFS for Solr
Date Fri, 05 Dec 2014 02:28:12 GMT

    [ https://issues.apache.org/jira/browse/SENTRY-357?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14234950#comment-14234950
] 

shenguoquan edited comment on SENTRY-357 at 12/5/14 2:28 AM:
-------------------------------------------------------------

Hi [~prasadm] [~gchanan], The failed hive test is TestHDFSIntegration.testEnd2End. I explain
the reason why the test is failed(see the above). In my opinion, the location of loading policy
file for the LocalGroupMappingService is judged from the configuration. For example. when
the parameter fs.defaultFS is set hdfs://..., it should be load policy file from HDFS. In
the current source code of sentry, The LocalGroupMappingService get the configuration just
as following:
{code}configuration=new Configuration(){code}
May be it is doesn't matter for hive, because the core-site.xml and hdfs-site.xml are on the
classpath. But it is not the situation for Solr. Solr has no chance to judge from configuration
where the location is. The classpath for Solr has not the core-site.xml,hdfs-site.xml. If
sentry.solr.provider.resource=/user/solr/sentry/sentry-provider.ini is set, LocalGroupMappingService
in the Solr doesn't judge where it is, hdfs or localFilesystem. So it will default load the
file from localFileSystem. That's why the the jira fired.


was (Author: guoquan):
Hi [~prasadm] [~gchanan], The failed hive test is TestHDFSIntegration.testEnd2End. I explain
the reason why the test is failed(see the above). In my opinion, the location of loading policy
file for the LocalGroupMappingService is judged from the configuration. For example. when
the parameter fs.defaultFS is set hdfs://..., it should be load policy file from HDFS. In
the current source code of sentry, The LocalGroupMappingService get the configuration just
as following:
{code}configuration=new Configuration(){code}
May be it is doesn't matter for hive, because the core-site.xml and hdfs-site.xml are on the
classpath. But it is not the situation for Solr. Solr has no chance to judge from configuration
where the location is. The classpath for Solr has not the core-site.xml,hdfs-site.xml. If
sentry.solr.provider.resource=/user/solr/sentry/sentry-provider.ini is set, LocalGroupMappingService
in the Solr doesn't judge where it is, hdfs or localFilesystem. So it will default load the
file from localFileSystem. Why the the jira fired.

> Not able to read policy files on HDFS for Solr
> ----------------------------------------------
>
>                 Key: SENTRY-357
>                 URL: https://issues.apache.org/jira/browse/SENTRY-357
>             Project: Sentry
>          Issue Type: Bug
>    Affects Versions: 1.4.0
>            Reporter: Nishant Gupta
>            Assignee: shenguoquan
>            Priority: Blocker
>             Fix For: 1.5.0
>
>         Attachments: SENTRY-357.002.patch, SENTRY-357.003.patch, SENTRY-357.patch
>
>
> Using Cloudera CDH 4.7 packaged with sentry(incubating) 1.1.0+22. Unable to enable Sentry
authorization for Solr. Though the policy file is there on HDFS with required permissions
to solr user it gives the error while SolrAuthzBinding
> java.io.FileNotFoundException: File /user/solr/sentry/sentry-provider.ini does not exist



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message