Uploaded image for project: 'IMPALA'
  1. IMPALA
  2. IMPALA-1334

Impala does not map principals to lowercase, affecting Sentry authorisation

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: Impala 2.0
    • Fix Version/s: Impala 2.0
    • Component/s: None
    • Labels:
      None

      Description

      If a user authenticates as USER@DOMAIN.COM, the string 'USER' will be passed to Sentry for authorisation. However, Sentry might expect lower-case user identifiers.

      Hadoop has auth_to_local rules that can accomplish this. In the short term, we should consider mapping all usernames to lower-case (controllable by a flag).

        Attachments

          Activity

            People

            • Assignee:
              henryr Henry Robinson
              Reporter:
              henryr Henry Robinson
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: