We have a use case where a Gateway would provide unified and controlled access to secure hadoop cluster.
The Gateway itself would authenticate to secure WebHDFS, Oozie and Templeton with SPNego.
The Gateway would authenticate the end user with http basic and would assert the end user identity as douser argument in the calls to downstream WebHDFS, Oozie and Templeton.
This works fine with WebHDFS and Oozie. But, does not work for Templeton as Templeton does not support proxy users.
Hence, request to add this improvement to Templeton.