Details
-
New Feature
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
Description
Apache Knox acts as a proxy for requests coming from the end users. In these cases, the IP address that HiveServer2 passes to the authorization/audit plugins via the HiveAuthzContext object only the IP address of the proxy, and not the end user.
For auditing purposes, the IP address of the end user and any proxies in between are useful.
HiveServer2 should pass the information from 'X-Forwarded-Host' header to the HiveAuthorizer plugins.
Attachments
Attachments
Issue Links
- is related to
-
RANGER-962 Ranger plugin should have an option to use X-Forwarded-For address
-
- Resolved
-
- links to