hive-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Siddharth Seth (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HIVE-13391) add an option to LLAP to use keytab to authenticate to read data
Date Wed, 06 Apr 2016 21:17:28 GMT

    [ https://issues.apache.org/jira/browse/HIVE-13391?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15229133#comment-15229133
] 

Siddharth Seth commented on HIVE-13391:
---------------------------------------

[~sershe] - TaskRunnerCallable already creates a UGI (taskUgi) with the tokens which are passed
in over the RPC request. This is passed in to the actual task executor and used to execute
the entire task. I think it will be a lot simpler to setup this UGI instances appropriately,
instead of modifying TezProcessor, LlapInputFormat, Orc* etc. The entire task runs in the
context of this UGI.

I don't think we need to retain the token sending behaviour. However, if we are retaining
it, we should stop sending the tokens if the LLAP instances are configured to run with keytabs.



> add an option to LLAP to use keytab to authenticate to read data
> ----------------------------------------------------------------
>
>                 Key: HIVE-13391
>                 URL: https://issues.apache.org/jira/browse/HIVE-13391
>             Project: Hive
>          Issue Type: Bug
>            Reporter: Sergey Shelukhin
>            Assignee: Sergey Shelukhin
>         Attachments: HIVE-13391.01.patch, HIVE-13391.02.patch, HIVE-13391.patch
>
>
> This can be used for non-doAs case to allow access to clients who don't propagate HDFS
tokens.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message