[IMPALA-8154] Disable auth_to_local by default

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Impala 2.12.0, Impala 3.1.0
• Fix Version/s: Impala 3.2.0
• Component/s: Distributed Exec
• Epic Color: ghx-label-5
• Assignee: Michael Ho
• Reporter: Michael Ho
• Created: 01/Feb/19 20:04
• Updated: 26/Feb/19 05:29
• Resolved: 21/Feb/19 07:15

Description

Before KRPC the local name mapping was done from the principal name entirely, however when KRPC is enabled Impala starts to use the system auth_to_local rules, "use_system_auth_to_local" is enabled by default. This can cause regression in cases where localauth is configured in the krb5.conf. This may cause issue for connection between Impalad after this commit

The fix is to disable use_system_auth_to_local by default.