[STORM-1851] Nimbus impersonation authorizer in defaults.yaml causes issues in secure mode

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.0.1
• Fix Version/s: 2.0.0, 1.0.2, 1.1.0
• Component/s: storm-core
• Epic Link: Release Apache Storm 1.0.2
• Assignee: Arun Mahadevan
• Reporter: Arun Mahadevan
• Created: 19/May/16 15:30
• Updated: 24/May/16 20:50
• Resolved: 24/May/16 20:50

Description

"nimbus.impersonation.authorizer" is set to "ImpersonationAuthorizer" by default and this causes issues when a user tries to submit topology as a different user in secure mode since the "nimbus.impersonation.acl" configuration is not set by default. Users need to set nimbus.impersonation.acl first before they can submit topology as a user other than "storm" in secure mode.

Removing this config allows users to submit topologies as any user in secure mode by default. Users can set up impersonation by providing both authorizer and the acls in storm.yaml.

Issue Links

• links to: GitHub Pull Request #1435