[SENTRY-301] Sentry plugin fails access service from secure Hive Metastore

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.4.0
• Fix Version/s: 1.4.0
• Assignee: Prasad Suresh Mujumdar
• Reporter: Prasad Suresh Mujumdar
• Created: 13/Jun/14 06:38
• Updated: 13/Jun/14 18:58
• Resolved: 13/Jun/14 18:58

Description

As part of SENTRY-289 patch, the sentry service wraps the transport open under the context of current user. In case of Hive metastore, the current user is impersonate end user. This user context doesn't have kerberor ticket.
For sentry service, we need to connect as user hive (principal of the metastore service).