[HIVE-15579] Support HADOOP_PROXY_USER for secure impersonation in hive metastore client

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.3.0
• Labels: TODOC2.2

Release Note

Using HADOOP_PROXY_USER a superuser can access hive through hive cli on behalf of another user.
To use this feature, export HADOOP_PROXY_USER with the user that has to be proxied and start hive cli.
The HADOOP_PROXY_USER variable can be set as part of system environmental variable or in system properties.

• Assignee: Nandakumar
• Reporter: Thejas Nair
• Created: 11/Jan/17 05:07
• Updated: 01/Mar/22 09:50
• Resolved: 24/Jan/17 01:02

Description

Hadoop clients support HADOOP_PROXY_USER for secure impersonation. It would be useful to have similar feature for hive metastore client.

Issue Links

• is related to: HIVE-13384 Failed to create HiveMetaStoreClient object with proxy user when Kerberos enabled