Gregory Chanan created SENTRY-388:
-------------------------------------
Summary: Solr Binding initKerberos should use supplied
Configuration
Key: SENTRY-388
URL: https://issues.apache.org/jira/browse/SENTRY-388
Project: Sentry
Issue Type: Bug
Affects Versions: 1.3.0
Reporter: Gregory Chanan
Assignee: Gregory Chanan
Sentry communicates with secure HDFS by creating a new Configuration object:
https://github.com/apache/incubator-sentry/blob/3be10df92c92e39e4d91ff2114f3f72783926e82/sentry-binding/sentry-binding-solr/src/main/java/org/apache/sentry/binding/solr/authz/SolrAuthzBinding.java#L185
The issue with that is when its used to set the UserGroupInformation
configuration, it overwrites the existing configuration, which may have other
(server) settings like kerberos rules. Ideally there would be separate
client/servers interfaces, but lacking that, we need to use the passed in
configuration.
--
This message was sent by Atlassian JIRA
(v6.2#6252)