Return-Path: 
 <issues-return-122402-apmail-hbase-issues-archive=hbase.apache.org@hbase.apache.org>
X-Original-To: apmail-hbase-issues-archive@www.apache.org
Delivered-To: apmail-hbase-issues-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 7F0EA107EE
	for <apmail-hbase-issues-archive@www.apache.org>;
 Tue,  5 Nov 2013 19:16:18 +0000 (UTC)
Received: (qmail 30778 invoked by uid 500); 5 Nov 2013 19:16:18 -0000
Delivered-To: apmail-hbase-issues-archive@hbase.apache.org
Received: (qmail 30742 invoked by uid 500); 5 Nov 2013 19:16:18 -0000
Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:issues-help@hbase.apache.org>
List-Unsubscribe: <mailto:issues-unsubscribe@hbase.apache.org>
List-Post: <mailto:issues@hbase.apache.org>
List-Id: <issues.hbase.apache.org>
Delivered-To: mailing list issues@hbase.apache.org
Received: (qmail 30733 invoked by uid 99); 5 Nov 2013 19:16:18 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 05 Nov 2013 19:16:18 +0000
Date: Tue, 5 Nov 2013 19:16:18 +0000 (UTC)
From: "Devaraj Das (JIRA)" <jira@apache.org>
To: issues@hbase.apache.org
Message-ID: <JIRA.12676745.1383178514918.23766.1383678978249@arcas>
In-Reply-To: <JIRA.12676745.1383178514918@arcas>
References: <JIRA.12676745.1383178514918@arcas>
Subject: [jira] [Commented] (HBASE-9866) Support the mode where REST server
 authorizes proxy users
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394


    [ https://issues.apache.org/jira/browse/HBASE-9866?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13814149#comment-13814149 ] 

Devaraj Das commented on HBASE-9866:
------------------------------------

[~toffer], yes, services like webhcat supports doAs, but they have different config knobs for configuring the groups/ip-addresses. Maybe they map these configurations to the underlying Hadoop configurations internally.

[~jxiang], okay will add a configuration for turning this feature on/off...

> Support the mode where REST server authorizes proxy users
> ---------------------------------------------------------
>
>                 Key: HBASE-9866
>                 URL: https://issues.apache.org/jira/browse/HBASE-9866
>             Project: HBase
>          Issue Type: Improvement
>            Reporter: Devaraj Das
>            Assignee: Devaraj Das
>             Fix For: 0.96.1
>
>         Attachments: 9866-1.txt
>
>
> In one use case, someone was trying to authorize with the REST server as a proxy user. That mode is not supported today. 
> The curl request would be something like (assuming SPNEGO auth) - 
> {noformat}
> curl -i --negotiate -u : http://<HOST>:<PORT>/version/cluster?doas=<USER>
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.1#6144)