Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-8660 [rest] support secure REST access
  3. HBASE-8662

[rest] support impersonation

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 0.98.0, 0.95.2
    • REST, security
    • None
    • Reviewed
    • Hide
      With the patch, if "hbase.rest.authentication.type" is set to "kerberos" and security is turned on, REST server will impersonate the authenticated user in access HBase.

      The RPC layer proxy user settings should be configured properly to allow impersonation.
      Show
      With the patch, if "hbase.rest.authentication.type" is set to "kerberos" and security is turned on, REST server will impersonate the authenticated user in access HBase. The RPC layer proxy user settings should be configured properly to allow impersonation.

    Description

      Currently, our client API uses a fixed user: the current user. It should accept a user passed in, if authenticated.

      Attachments

        1. method_doas.patch
          17 kB
          Francis Christopher Liu
        2. secure_rest.patch
          24 kB
          Francis Christopher Liu
        3. trunk-8662_v2.patch
          55 kB
          Jimmy Xiang
        4. trunk-8662_v3.patch
          34 kB
          Jimmy Xiang
        5. trunk-8662_v4.patch
          32 kB
          Jimmy Xiang
        6. trunk-8662_v5.patch
          36 kB
          Jimmy Xiang
        7. trunk-8662_v6.patch
          39 kB
          Jimmy Xiang
        8. trunk-8662_v7.1.patch
          52 kB
          Jimmy Xiang
        9. trunk-8662_v7.2.patch
          53 kB
          Jimmy Xiang
        10. trunk-8662_v7.3.patch
          53 kB
          Jimmy Xiang
        11. trunk-8662_v7.patch
          50 kB
          Jimmy Xiang
        12. trunk-8662.patch
          59 kB
          Jimmy Xiang

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. HBASE-9321 Contention getting the current user in RpcClient$Connection.writeRequest

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            People

              jxiang Jimmy Xiang
              jxiang Jimmy Xiang
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: