hive-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Thejas M Nair (JIRA)" <>
Subject [jira] [Updated] (HIVE-12688) HIVE-11826 makes hive unusable in properly secured cluster
Date Thu, 17 Dec 2015 23:59:46 GMT


Thejas M Nair updated HIVE-12688:
    Fix Version/s: 2.1.0

> HIVE-11826 makes hive unusable in properly secured cluster
> ----------------------------------------------------------
>                 Key: HIVE-12688
>                 URL:
>             Project: Hive
>          Issue Type: Bug
>    Affects Versions: 1.3.0, 2.0.0
>            Reporter: Thejas M Nair
>            Assignee: Thejas M Nair
>            Priority: Blocker
>             Fix For: 1.3.0, 2.0.0, 2.1.0
>         Attachments: HIVE-12688.1.patch
> HIVE-11826 makes a change to restrict connections to metastore to users who belong to
groups under 'hadoop.proxyuser.hive.groups'.
> That property was only a meant to be a hadoop property, which controls what users the
hive user can impersonate. What this change is doing is to enable use of that to also restrict
who can connect to metastore server. This is new functionality, not a bug fix. There is value
to this functionality.
> However, this change makes hive unusable in a properly secured cluster. If 'hadoop.proxyuser.hive.hosts'
is set to the proper set of hosts that run Metastore and Hiveserver2 (instead of a very open
"*"), then users will be able to connect to metastore only from those hosts.

This message was sent by Atlassian JIRA

View raw message