hive-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Brock Noland (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HIVE-7890) SessionStart creates HMS Client while not impersonating
Date Wed, 27 Aug 2014 06:58:57 GMT

     [ https://issues.apache.org/jira/browse/HIVE-7890?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Brock Noland updated HIVE-7890:
-------------------------------

    Description: 
In SessionState.start [an instance of the the HMSClient is created|https://github.com/apache/hive/blob/trunk/ql/src/java/org/apache/hadoop/hive/ql/session/SessionState.java#L367].
When impersonation is enabled, this call does not occur within a "doas" call and thus the
HMSClient is created as the server user, not the impersonated user.

Thus calls to the HMS are made by the "hive" user as opposed to the end user. This causes
file ownership such as a database directory owner to be incorrect.

  was:In SessionStart an instance of the the HMSClient is created. When impersonation is enabled,
this call does not occur within a "doas" call and thus the HMSClient is created as the server
user, not the impersonated user.


> SessionStart creates HMS Client while not impersonating
> -------------------------------------------------------
>
>                 Key: HIVE-7890
>                 URL: https://issues.apache.org/jira/browse/HIVE-7890
>             Project: Hive
>          Issue Type: Bug
>            Reporter: Brock Noland
>         Attachments: HIVE-7890.2.patch
>
>
> In SessionState.start [an instance of the the HMSClient is created|https://github.com/apache/hive/blob/trunk/ql/src/java/org/apache/hadoop/hive/ql/session/SessionState.java#L367].
When impersonation is enabled, this call does not occur within a "doas" call and thus the
HMSClient is created as the server user, not the impersonated user.
> Thus calls to the HMS are made by the "hive" user as opposed to the end user. This causes
file ownership such as a database directory owner to be incorrect.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message