hive-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Thejas M Nair (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HIVE-4315) enable doAs in unsecure mode for hive server2, when MR job runs locally
Date Mon, 15 Apr 2013 21:16:19 GMT

    [ https://issues.apache.org/jira/browse/HIVE-4315?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13632207#comment-13632207
] 

Thejas M Nair commented on HIVE-4315:
-------------------------------------

bq. I think if(isSecureImpl) is not required.
Yes, you are right, it does not matter if it is security enabled. Will update the patch.

bq. .. so can you describe in a bit more detail the setup and query where this might manifest.
Updated the description. Do let me know if any other details need to be added.
                
> enable doAs in unsecure mode for hive server2, when MR job runs locally
> -----------------------------------------------------------------------
>
>                 Key: HIVE-4315
>                 URL: https://issues.apache.org/jira/browse/HIVE-4315
>             Project: Hive
>          Issue Type: Bug
>          Components: HiveServer2
>            Reporter: Thejas M Nair
>            Assignee: Thejas M Nair
>             Fix For: 0.11.0
>
>         Attachments: HIVE-4315.1.patch
>
>
> When MR job is run locally by hive (instead of hadoop cluster), the MR job ends up running
as hiveserver user instead of the user submitting the query, even if doAs configuration is
enabled.
> In case of map-side join (see [map join optimization|https://cwiki.apache.org/confluence/display/Hive/MapJoinOptimization])
, MapredLocalTask is spawned in child process to process the map-side file before adding it
to distributed cache. When hive.server2.enable.doAs is enabled, MapredLocalTask should run
as the user submitting the query. But by default, in case of unsecure (ie without kerberos
security) mode hadoop considers user the process runs as the user.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message