hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Devaraj Das (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HBASE-9866) Support the mode where REST server authorizes proxy users
Date Thu, 19 Dec 2013 18:18:07 GMT

     [ https://issues.apache.org/jira/browse/HBASE-9866?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Devaraj Das updated HBASE-9866:
-------------------------------

      Resolution: Fixed
    Release Note: hbase.rest.support.proxyuser when set to true would enable enable proxy-user
support in the REST server. Like any other server, e.g., NameNode, which supports proxy user
mode, appropriate proxy-user configuration needs to be set as well in the REST server (hadoop.proxyuser.$user.hosts,
hadoop.proxyuser.$user.groups). Requests can then be made to the REST server with a 'doAs'
in the query string url and if proxy user authorization check passes, the query will be executed
as the 'doAs' user.
          Status: Resolved  (was: Patch Available)

Committed.

> Support the mode where REST server authorizes proxy users
> ---------------------------------------------------------
>
>                 Key: HBASE-9866
>                 URL: https://issues.apache.org/jira/browse/HBASE-9866
>             Project: HBase
>          Issue Type: Improvement
>            Reporter: Devaraj Das
>            Assignee: Devaraj Das
>             Fix For: 0.98.0, 0.99.0
>
>         Attachments: 9866-1.txt, 9866-2.txt, 9866-3.txt, 9866-4.txt, 9866-4.txt
>
>
> In one use case, someone was trying to authorize with the REST server as a proxy user.
That mode is not supported today. 
> The curl request would be something like (assuming SPNEGO auth) - 
> {noformat}
> curl -i --negotiate -u : http://<HOST>:<PORT>/version/cluster?doas=<USER>
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.1.4#6159)

Mime
View raw message