impala-reviews mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Impala Public Jenkins (Code Review)" <>
Subject [Impala-ASF-CR] KUDU-2198. Allow disregarding system-wide auth-to-local mapping
Date Thu, 21 Dec 2017 00:13:42 GMT
Impala Public Jenkins has submitted this change and it was merged. (

Change subject: KUDU-2198. Allow disregarding system-wide auth-to-local mapping

KUDU-2198. Allow disregarding system-wide auth-to-local mapping

This adds a workaround for an issue reported on the user mailing list.
Some systems are configured such that the auth_to_local mapping provided
by the krb5 library doesn't work properly for service accounts.

This patch adds a new configuration which allows Kudu to disregard the
system auth_to_local rules and instead just map kerberos principals to
their first component, which is typically the username.

Change-Id: I2e893493f52965ea54d2ceaac83d375285b49486
Reviewed-by: Alexey Serbin <>
Reviewed-by: Dan Burkert <>
Tested-by: Kudu Jenkins
Reviewed-by: Joe McDonnell <>
Tested-by: Impala Public Jenkins
M be/src/kudu/security/
1 file changed, 24 insertions(+), 11 deletions(-)

  Joe McDonnell: Looks good to me, approved
  Impala Public Jenkins: Verified

To view, visit
To unsubscribe, visit

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: merged
Gerrit-Change-Id: I2e893493f52965ea54d2ceaac83d375285b49486
Gerrit-Change-Number: 8875
Gerrit-PatchSet: 2
Gerrit-Owner: Michael Ho <>
Gerrit-Reviewer: Impala Public Jenkins
Gerrit-Reviewer: Joe McDonnell <>
Gerrit-Reviewer: Lars Volker <>
Gerrit-Reviewer: Michael Ho <>
Gerrit-Reviewer: Sailesh Mukil <>
Gerrit-Reviewer: Todd Lipcon <>

  • Unnamed multipart/alternative (inline, 8-Bit, 0 bytes)
View raw message