Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id B04D2200D28 for ; Mon, 23 Oct 2017 19:52:21 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id AEC2C1609E0; Mon, 23 Oct 2017 17:52:21 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id A5FB61609DF for ; Mon, 23 Oct 2017 19:52:20 +0200 (CEST) Received: (qmail 26939 invoked by uid 500); 23 Oct 2017 17:52:19 -0000 Mailing-List: contact user-help@flink.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list user@flink.apache.org Received: (qmail 26929 invoked by uid 99); 23 Oct 2017 17:52:19 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 23 Oct 2017 17:52:19 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id 959E81A0595 for ; Mon, 23 Oct 2017 17:52:18 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -3.203 X-Spam-Level: X-Spam-Status: No, score=-3.203 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=2, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-2.8, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd2-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gs.com Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id wMHy5hcKQKzs for ; Mon, 23 Oct 2017 17:52:14 +0000 (UTC) Received: from mxe03.gs.com (mxe03.gs.com [12.47.208.212]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTPS id D02DC5FBE2 for ; Mon, 23 Oct 2017 17:52:13 +0000 (UTC) Received: from pps.filterd (gsppacdp02sd.idz.gs.com [127.0.0.1]) by gsppacdp02sd.idz.gs.com (8.16.0.21/8.16.0.21) with SMTP id v9NHldJH013163; Mon, 23 Oct 2017 13:52:06 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gs.com; h=from : to : subject : date : message-id : content-type : mime-version; s=gs201505; bh=uOXAVX6wmhSiNC1np9bb4W1TyI0pk4bd87vNCi2RKAk=; b=YzTXbel3o28GJmu0MhmQqtl7A1HOIiPzm5yKgaJULNptx9bzXKtNYt9Mt+g/4J1eWSdJ /U4s+P8xphZaxQzDT6jF7VYfuYtn70mkRiBja/7AlgdZ5ypIPPIaqlB4w96FGKle0G6e ikEayvz7yoqNC9jwFtqEEszYGCvMShHrCdWsXrcf4vUb3//7ihLWhYM/qcOAPWU+jBh0 bpTkGAXH/+YjGx3eiHX+ZStBqO3WNYqzRQpLDQ47NfdgSYYFnoWEsiQbp86eWXmq2GPl uwo4azzDu54o7nZBxr27KoEOhTzYGGtTFRusjzOWQ8aFQ++aoGLssdb0v/UA2Vy+ZVUb 7w== Received: from gsppacdp05nd.inz.gs.com ([10.205.68.213]) by gsppacdp02sd.idz.gs.com with ESMTP id 2dr18ytjbw-1 for ; Mon, 23 Oct 2017 13:52:06 -0400 Received: from pps.filterd (gsppacdp05nd.inz.gs.com [127.0.0.1]) by gsppacdp05nd.inz.gs.com (8.16.0.17/8.16.0.17) with SMTP id v9NHn0ji019839 for ; Mon, 23 Oct 2017 13:52:06 -0400 Received: from gsdgamp07etn3.firmwide.corp.gs.com (gsdgamp07etn3.firmwide.corp.gs.com [10.47.13.21]) by gsppacdp05nd.inz.gs.com with ESMTP id 2dr1e9wa2w-1 for ; Mon, 23 Oct 2017 13:52:06 -0400 Received: from GSDGAMP07ETN2.firmwide.corp.gs.com (10.59.149.182) by gsdgamp07etn3.firmwide.corp.gs.com (10.47.13.21) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 23 Oct 2017 13:52:05 -0400 Received: from GSDGAMP07ETN2.firmwide.corp.gs.com ([fe80::d9a0:3361:9e5b:308f]) by gsdgamp07etn2.firmwide.corp.gs.com ([fe80::d9a0:3361:9e5b:308f%12]) with mapi id 15.00.1210.000; Mon, 23 Oct 2017 13:52:05 -0400 From: "Chan, Regina" To: "'user@flink.apache.org'" Subject: Impersonation support in Flink Thread-Topic: Impersonation support in Flink Thread-Index: AdNMJ6NxqxG0UpqdTLa87MqzM9hdrw== Date: Mon, 23 Oct 2017 17:52:05 +0000 Message-ID: <91cb5635748c451da2b4e7edae2ec3a4@gsdgamp07etn2.firmwide.corp.gs.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-gs-occ-version-number: Gnpis5oPIQbsgUemdYQZTA== x-gs-occ-classification: cADEiD6MtM/V81yfDcvek6MvoudoN9I/pOVBz2TcAP0= x-gs-occ-clientinfo: vA/7HhuVqq+qwPcW44++u7lNdr+Nq+RcrnfRSr1/GjxMwpvUZpR+bFkyltM/Bo2CPhlQojExU8Kd0MNTPBKjaesc1+wBeScVkv1TmZS2mOz2+mN6lIknITkFJP6dfcADvNDuFiyX09MR5BPz+y205nqvahZ+JYaxD8UckGJhSDhvreITqBDkVwuvZ8G32XZRqwTFytFfvgKa2A0JfYCu8YG57wezoYMn60HfU3LLI+8= x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.46.7.36] Content-Type: multipart/alternative; boundary="_000_91cb5635748c451da2b4e7edae2ec3a4gsdgamp07etn2firmwideco_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2017-10-23_08:,, signatures=0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2017-10-23_08:,, signatures=0 archived-at: Mon, 23 Oct 2017 17:52:21 -0000 --_000_91cb5635748c451da2b4e7edae2ec3a4gsdgamp07etn2firmwideco_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi folks, Is Flink is able to do impersonation using UserGroupInformation? How do we = make all the tasks run with this in a way that we wouldn't have to do it pe= r task? UserGroupInformation ugi =3D UserGroupInformation.createProxyUser( proxyUse= r, UserGroupInformation.getLoginUser()); PrivilegedExceptionAction iAction =3D new PrivilegedExceptionAction() { public Void run() throws Exception { action.run(); return null; } }; ugi.doAs(iAction); Regina Chan Goldman Sachs - Enterprise Platforms, Data Architecture 30 Hudson Street, 37th floor | Jersey City, NY 07302 * (212) 902-5697 --_000_91cb5635748c451da2b4e7edae2ec3a4gsdgamp07etn2firmwideco_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi folks,

 

Is Flink is able to do impersonation usin= g UserGroupInformation? How do we make all the tasks run with this in a way= that we wouldn’t have to do it per task?

 

 

UserGroupInformation = ugi =3D UserGroupInformation= .createProxyUser( proxyUser, UserGroupInformation= .getLoginUser());       &n= bsp;  

PrivilegedExceptionAction<Vo= id> = iAction =3D new PrivilegedExceptionAction<Void>()

{

public = Void run() throws Exception

{

     &= nbsp;        = action.run();

     &= nbsp;        return null;

     &= nbsp; }

};

ugi.doAs(iAction);

 

 

 

Regina Chan

Goldma= n Sachs – Enterprise Platforms, Data Architecture<= /span>

30 Hudson Street, 37th floor= | Jersey City, NY 07302 (<= /span>  (212) 902-5697

 

--_000_91cb5635748c451da2b4e7edae2ec3a4gsdgamp07etn2firmwideco_--