[SENTRY-1037] Set "hadoop.security.authentication" to "kerberos" in the Generic Client

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.7.0
• Fix Version/s: 1.7.0
• Component/s: Service, Solr Plugin
• Assignee: Gregory Chanan
• Reporter: Gregory Chanan
• Created: 29/Jan/16 01:26
• Updated: 30/Jan/16 00:41
• Resolved: 30/Jan/16 00:41

Description

Today, the SentryShellSolr follows the same pattern as SentryShellHive, which is just getting a "new Configuration()". In order to connect to a service requiring kerberos, the Configuration must have "hadoop.security.authentication" set to "kerberos" since the generic client uses hadoop-auth to do the authentication. But this will often not be set in the context of Solr, which may not even have a hadoop-related configuration around.

So, we should handle the configuration in the same way as we do for the binding; namely, if the client intends to use kerberos, we set "hadoop.security.authentication" to "kerberos"

Issue Links

• links to: Review Request