Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-10469 ProxyUser improvements
  3. HADOOP-10448

Support pluggable mechanism to specify proxy user settings

VotersWatch issueWatchersLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.3.0
    • 2.5.0
    • security
    • None

    Description

      We have a requirement to support large number of superusers. (users who impersonate as another user) (http://hadoop.apache.org/docs/r1.2.1/Secure_Impersonation.html)

      Currently each superuser needs to be defined in the core-site.xml via proxyuser settings. This will be cumbersome when there are 1000 entries.

      It seems useful to have a pluggable mechanism to specify proxy user settings with the current approach as the default.

      Attachments

        1. HADOOP-10448.patch
          48 kB
          Benoy Antony
        2. HADOOP-10448.patch
          48 kB
          Benoy Antony
        3. HADOOP-10448.patch
          57 kB
          Benoy Antony
        4. HADOOP-10448.patch
          42 kB
          Benoy Antony
        5. HADOOP-10448.patch
          33 kB
          Benoy Antony
        6. HADOOP-10448.patch
          33 kB
          Benoy Antony
        7. HADOOP-10448.patch
          34 kB
          Benoy Antony
        8. HADOOP-10448.patch
          33 kB
          Benoy Antony
        9. HADOOP-10448.patch
          33 kB
          Benoy Antony
        10. HADOOP-10448.patch
          29 kB
          Benoy Antony
        11. HADOOP-10448.patch
          20 kB
          Benoy Antony
        12. HADOOP-10448-branch2.patch
          50 kB
          Benoy Antony

        Issue Links

        depends upon

        Sub-task - The sub-task of the issue HADOOP-10467 Enable proxyuser specification to support list of users in addition to list of groups.

        • Major - Major loss of function.
        • Closed

        Sub-task - The sub-task of the issue HADOOP-10471 Reduce the visibility of constants in ProxyUsers

        • Major - Major loss of function.
        • Closed

        Sub-task - The sub-task of the issue HADOOP-10566 Refactor proxyservers out of ProxyUsers

        • Major - Major loss of function.
        • Closed
        relates to

        Sub-task - The sub-task of the issue HIVE-7184 TestHadoop20SAuthBridge no longer compiles after HADOOP-10448

        • Major - Major loss of function.
        • Closed

        Improvement - An improvement or enhancement to an existing feature or task. HADOOP-10593 Concurrency Improvements

        • Major - Major loss of function.
        • In Progress

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            benoyantony Benoy Antony
            benoyantony Benoy Antony
            Votes:
            0 Vote for this issue
            Watchers:
            8 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment