[IMPALA-1334] Impala does not map principals to lowercase, affecting Sentry authorisation

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: Impala 2.0
• Fix Version/s: Impala 2.0
• Assignee: Henry Robinson
• Reporter: Henry Robinson
• Created: 01/Oct/14 16:29
• Updated: 02/Oct/14 18:11
• Resolved: 02/Oct/14 18:11

Description

If a user authenticates as [e-mail], the string 'USER' will be passed to Sentry for authorisation. However, Sentry might expect lower-case user identifiers.

Hadoop has auth_to_local rules that can accomplish this. In the short term, we should consider mapping all usernames to lower-case (controllable by a flag).