[HADOOP-10817] ProxyUsers configuration should support configurable prefixes

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.0-alpha1
• Fix Version/s: 2.6.0
• Component/s: security
• Target Version/s: 2.6.0
• Hadoop Flags: Reviewed
• Assignee: Alejandro Abdelnur
• Reporter: Alejandro Abdelnur
• Created: 11/Jul/14 22:32
• Updated: 12/May/16 18:23
• Resolved: 18/Jul/14 19:43

Description

Currently ProxyUsers and the ImpersonationProvider are hardcoded to use hadoop.proxyuser. prefixes for loading proxy user configuration.

Adding the possibility of using a custom prefix will enable reusing the ProxyUsers class from other components (i.e. HttpFS and KMS).

Issue Links

• blocks: HADOOP-10835 Implement HTTP proxyuser support in HTTP authentication client/server libraries
• breaks: HADOOP-10885 Fix dead links to the javadocs of o.a.h.security.authorize
• breaks: HIVE-9245 TestHadoop20SAuthBridge uses DefaultImpersonationProvider (2.4.0 -> 2.6.0 API change)
• is duplicated by: HDFS-7362 Proxy user refresh won't modify or remove existing groups or hosts from super user list
• relates to: HIVE-7184 TestHadoop20SAuthBridge no longer compiles after HADOOP-10448