Uploaded image for project: 'Sentry'
  1. Sentry
  2. SENTRY-388

Solr Binding initKerberos should use supplied Configuration

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.3.0
    • Fix Version/s: 1.5.0
    • Component/s: None
    • Labels:
      None

      Description

      Sentry communicates with secure HDFS by creating a new Configuration object:
      https://github.com/apache/incubator-sentry/blob/3be10df92c92e39e4d91ff2114f3f72783926e82/sentry-binding/sentry-binding-solr/src/main/java/org/apache/sentry/binding/solr/authz/SolrAuthzBinding.java#L185

      The issue with that is when its used to set the UserGroupInformation configuration, it overwrites the existing configuration, which may have other (server) settings like kerberos rules. Ideally there would be separate client/servers interfaces, but lacking that, we need to use the passed in configuration.

        Attachments

        1. SENTRY-388.patch
          2 kB
          Gregory Chanan

          Activity

            People

            • Assignee:
              gchanan Gregory Chanan
              Reporter:
              gchanan Gregory Chanan
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: