hive-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Mithun Radhakrishnan (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HIVE-17853) RetryingMetaStoreClient loses UGI impersonation-context when reconnecting after timeout
Date Thu, 19 Oct 2017 22:16:00 GMT
Mithun Radhakrishnan created HIVE-17853:
-------------------------------------------

             Summary: RetryingMetaStoreClient loses UGI impersonation-context when reconnecting
after timeout
                 Key: HIVE-17853
                 URL: https://issues.apache.org/jira/browse/HIVE-17853
             Project: Hive
          Issue Type: Bug
          Components: Metastore
    Affects Versions: 3.0.0, 2.4.0, 2.2.1
            Reporter: Mithun Radhakrishnan
            Assignee: Chris Drome
            Priority: Critical


The {{RetryingMetaStoreClient}} is used to automatically reconnect to the Hive metastore,
after client timeout, transparently to the user.

In case of user impersonation (e.g. Oozie super-user {{oozie}} impersonating a Hadoop user
{{mithun}}, to run a workflow), in case of timeout, we find that the reconnect causes the
{{UGI.doAs()}} context to be lost. Any further metastore operations will be attempted as the
login-user ({{oozie}}), as opposed to the effective user ({{mithunr}}).

We should have a fix for this shortly.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message