Return-Path: 
 <issues-return-122114-apmail-hbase-issues-archive=hbase.apache.org@hbase.apache.org>
X-Original-To: apmail-hbase-issues-archive@www.apache.org
Delivered-To: apmail-hbase-issues-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 1DE9510A9A
	for <apmail-hbase-issues-archive@www.apache.org>;
 Sat,  2 Nov 2013 16:46:07 +0000 (UTC)
Received: (qmail 55595 invoked by uid 500); 2 Nov 2013 16:45:58 -0000
Delivered-To: apmail-hbase-issues-archive@hbase.apache.org
Received: (qmail 55313 invoked by uid 500); 2 Nov 2013 16:45:39 -0000
Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:issues-help@hbase.apache.org>
List-Unsubscribe: <mailto:issues-unsubscribe@hbase.apache.org>
List-Post: <mailto:issues@hbase.apache.org>
List-Id: <issues.hbase.apache.org>
Delivered-To: mailing list issues@hbase.apache.org
Received: (qmail 55184 invoked by uid 99); 2 Nov 2013 16:45:23 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 02 Nov 2013 16:45:23 +0000
Date: Sat, 2 Nov 2013 16:45:23 +0000 (UTC)
From: "Jimmy Xiang (JIRA)" <jira@apache.org>
To: issues@hbase.apache.org
Message-ID: <JIRA.12676745.1383178514918.11278.1383410723334@arcas>
In-Reply-To: <JIRA.12676745.1383178514918@arcas>
References: <JIRA.12676745.1383178514918@arcas>
Subject: [jira] [Commented] (HBASE-9866) Support the mode where REST server
 authorizes proxy users
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394


    [ https://issues.apache.org/jira/browse/HBASE-9866?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13812064#comment-13812064 ] 

Jimmy Xiang commented on HBASE-9866:
------------------------------------

I saw that. It is something like user A is allowed to do something on behalf of user B, now let user C to do it on behalf of user B instead, if allowed. If A == C and they share the same configuration, it may be fine.  Now, A could be different from C.  Even they are the same, the configuration could be different since one is the REST server (i,e, HBase client side), the other is on the HBase server (master/rs) side.

> Support the mode where REST server authorizes proxy users
> ---------------------------------------------------------
>
>                 Key: HBASE-9866
>                 URL: https://issues.apache.org/jira/browse/HBASE-9866
>             Project: HBase
>          Issue Type: Improvement
>            Reporter: Devaraj Das
>            Assignee: Devaraj Das
>             Fix For: 0.96.1
>
>         Attachments: 9866-1.txt
>
>
> In one use case, someone was trying to authorize with the REST server as a proxy user. That mode is not supported today. 
> The curl request would be something like (assuming SPNEGO auth) - 
> {noformat}
> curl -i --negotiate -u : http://<HOST>:<PORT>/version/cluster?doas=<USER>
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.1#6144)