Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-17853

RetryingMetaStoreClient loses UGI impersonation-context when reconnecting after timeout

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 3.0.0, 2.4.0, 2.2.1
    • Fix Version/s: 3.0.0, 2.4.0, 2.2.1
    • Component/s: Metastore
    • Labels:
      None

      Description

      The RetryingMetaStoreClient is used to automatically reconnect to the Hive metastore, after client timeout, transparently to the user.

      In case of user impersonation (e.g. Oozie super-user oozie impersonating a Hadoop user mithun, to run a workflow), in case of timeout, we find that the reconnect causes the UGI.doAs() context to be lost. Any further metastore operations will be attempted as the login-user (oozie), as opposed to the effective user (mithun).

      We should have a fix for this shortly.

        Attachments

        1. HIVE-17853.01-branch-2.patch
          5 kB
          Chris Drome
        2. HIVE-17853.01.patch
          5 kB
          Chris Drome

          Issue Links

            Activity

              People

              • Assignee:
                cdrome Chris Drome
                Reporter:
                mithun Mithun Radhakrishnan
              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: