[HADOOP-6995] Allow wildcards to be used in ProxyUsers configurations

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 0.22.0
• Fix Version/s: 1.1.0, 0.22.1
• Component/s: security
• Hadoop Flags: Reviewed
• Release Note: When configuring proxy users and hosts, the special wildcard value "*" may be specified to match any host or any user.
• Assignee: Todd Lipcon
• Reporter: Todd Lipcon
• Created: 08/Oct/10 06:11
• Updated: 08/Jun/12 22:37
• Resolved: 06/Jan/11 18:46

Description

There are some cases where the full tightness of the ProxyUsers configuration is not required or available – for example, not all users of oozie may share a common "oozie-users" group, and the operators would prefer to allow oozie on a given host to act proxy for any user. We should allow the operator to specify a wildcard for hosts or groups in the proxyuser configurations.