Uploaded image for project: 'Sentry'
  1. Sentry
  2. SENTRY-62

Solr binding should create a solr-usable Configuration to pass to the BackendProvider

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.3.0
    • Fix Version/s: 1.3.0
    • Component/s: None
    • Labels:
      None

      Description

      Today, the SolrAuthzBinding uses the SimpleFileProviderBackend, which ends up creating a configuration via:

      new Configuration();
      

      the issue with this is this might not be the Configuration we want – for example, in a secure setup, it may not have all the authentication/authorization properties necessary to connect to hdfs to read the sentry .ini file. I'm not sure exactly how this works in hive, but it may be because hive has the relevant core-site.xml, hdfs-site.xml in its classpath, whereas in solr, this is uncommon.

      Solr does have a way to specify hdfs configs already via the HdfsDirectoryFactory and HdfsUtils. We should just reuse this.

        Attachments

        1. SENTRY-62v2.patch
          5 kB
          Gregory Chanan

          Activity

            People

            • Assignee:
              gchanan Gregory Chanan
              Reporter:
              gchanan Gregory Chanan
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: