[IMPALA-3095] Allow additional Kerberos users to be authorized to access internal APIs

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: Impala 2.5.0
• Fix Version/s: Impala 2.5.0, Impala 2.2.10, Impala 2.3.4
• Component/s: Security
• Target Version: Impala 2.5.0, Impala 2.3.4
• Assignee: Henry Robinson
• Reporter: Henry Robinson
• Created: 27/Feb/16 00:51
• Updated: 06/Sep/16 17:08
• Resolved: 01/Mar/16 00:02

Description

By default we allow only the 'internal' principal to be authorized by Impala to access the internal APIs (i.e. not Beeswax or HS2). There are a couple of use cases for allowing third parties to access these APIs, but we should carefully whitelist them.