Uploaded image for project: 'Phoenix'
  1. Phoenix
  2. PHOENIX-3175

Unnecessary UGI proxy user impersonation check

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 4.9.0, 4.8.1
    • Labels:
      None

      Description

      While looking at some issues reported by Jean-Philippe Player, we found that some of the default Hadoop proxyuser configuration properties in core-site.xml weren't working as intended.

      Devaraj Kavali's keen eye noticed that PQS was doing an unnecessary UGI ProxyUser impersonation check.

      We can rely on the SPNEGO authentication as the barrier to use PQS, but then defer to the impersonation check that HBase is already doing as to which PQS instances are allowed to talk to HBase (defined by core-site.xml).

        Attachments

        1. PHOENIX-3175.001.patch
          1 kB
          Josh Elser

          Activity

            People

            • Assignee:
              elserj Josh Elser
              Reporter:
              elserj Josh Elser
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: