Uploaded image for project: 'Sentry (Retired)'
  1. Sentry (Retired)
  2. SENTRY-62

Solr binding should create a solr-usable Configuration to pass to the BackendProvider

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 1.3.0
    • 1.3.0
    • None
    • None

    Description

      Today, the SolrAuthzBinding uses the SimpleFileProviderBackend, which ends up creating a configuration via:

      new Configuration();
      

      the issue with this is this might not be the Configuration we want – for example, in a secure setup, it may not have all the authentication/authorization properties necessary to connect to hdfs to read the sentry .ini file. I'm not sure exactly how this works in hive, but it may be because hive has the relevant core-site.xml, hdfs-site.xml in its classpath, whereas in solr, this is uncommon.

      Solr does have a way to specify hdfs configs already via the HdfsDirectoryFactory and HdfsUtils. We should just reuse this.

      Attachments

        1. SENTRY-62v2.patch
          5 kB
          Gregory Chanan

        Activity

          People

            gchanan Gregory Chanan
            gchanan Gregory Chanan
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: