Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-10469 ProxyUser improvements
  3. HADOOP-10448

Support pluggable mechanism to specify proxy user settings

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.3.0
    • 2.5.0
    • security
    • None

    Description

      We have a requirement to support large number of superusers. (users who impersonate as another user) (http://hadoop.apache.org/docs/r1.2.1/Secure_Impersonation.html)

      Currently each superuser needs to be defined in the core-site.xml via proxyuser settings. This will be cumbersome when there are 1000 entries.

      It seems useful to have a pluggable mechanism to specify proxy user settings with the current approach as the default.

      Attachments

        1. HADOOP-10448.patch
          20 kB
          Benoy Antony
        2. HADOOP-10448.patch
          29 kB
          Benoy Antony
        3. HADOOP-10448.patch
          33 kB
          Benoy Antony
        4. HADOOP-10448.patch
          33 kB
          Benoy Antony
        5. HADOOP-10448.patch
          34 kB
          Benoy Antony
        6. HADOOP-10448.patch
          33 kB
          Benoy Antony
        7. HADOOP-10448.patch
          33 kB
          Benoy Antony
        8. HADOOP-10448.patch
          42 kB
          Benoy Antony
        9. HADOOP-10448.patch
          57 kB
          Benoy Antony
        10. HADOOP-10448.patch
          48 kB
          Benoy Antony
        11. HADOOP-10448.patch
          48 kB
          Benoy Antony
        12. HADOOP-10448-branch2.patch
          50 kB
          Benoy Antony

        Issue Links

          depends upon

          Sub-task - The sub-task of the issue HADOOP-10467 Enable proxyuser specification to support list of users in addition to list of groups.

          • Major - Major loss of function.
          • Closed

          Sub-task - The sub-task of the issue HADOOP-10471 Reduce the visibility of constants in ProxyUsers

          • Major - Major loss of function.
          • Closed

          Sub-task - The sub-task of the issue HADOOP-10566 Refactor proxyservers out of ProxyUsers

          • Major - Major loss of function.
          • Closed
          relates to

          Sub-task - The sub-task of the issue HIVE-7184 TestHadoop20SAuthBridge no longer compiles after HADOOP-10448

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-10593 Concurrency Improvements

          • Major - Major loss of function.
          • In Progress

          Activity

            People

              benoyantony Benoy Antony
              benoyantony Benoy Antony
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: