[ 
https://issues.apache.org/jira/browse/SENTRY-357?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14234950#comment-14234950
 ] 

shenguoquan commented on SENTRY-357:
------------------------------------

Hi [~prasadm] [~gchanan], The failed hive test is 
TestHDFSIntegration.testEnd2End. I explain the reason why the test is 
failed(see the above). In my opinion, the location of loading policy file for 
the LocalGroupMappingService is judged from the configuration. For example. 
when the parameter fs.defaultFS is set hdfs://..., it should be load policy 
file from HDFS. In the current source code of sentry, The 
LocalGroupMappingService get the configuration just as following:
{code}configuration=new Configuration(){code}
May be it is doesn't matter for hive, because the core-site.xml and 
hdfs-site.xml are on the classpath. But it is not the situation for Solr. Solr 
has no chance to judge from configuration where the location is. The classpath 
for Solr has not the core-site.xml,hdfs-site.xml. If 
sentry.solr.provider.resource=/user/solr/sentry/sentry-provider.ini is set, 
LocalGroupMappingService in the Solr doesn't judge where it is, hdfs or 
localFilesystem. So it will default load the file from localFileSystem. Why the 
the jira fired.

> Not able to read policy files on HDFS for Solr
> ----------------------------------------------
>
>                 Key: SENTRY-357
>                 URL: https://issues.apache.org/jira/browse/SENTRY-357
>             Project: Sentry
>          Issue Type: Bug
>    Affects Versions: 1.4.0
>            Reporter: Nishant Gupta
>            Assignee: shenguoquan
>            Priority: Blocker
>             Fix For: 1.5.0
>
>         Attachments: SENTRY-357.002.patch, SENTRY-357.003.patch, 
> SENTRY-357.patch
>
>
> Using Cloudera CDH 4.7 packaged with sentry(incubating) 1.1.0+22. Unable to 
> enable Sentry authorization for Solr. Though the policy file is there on HDFS 
> with required permissions to solr user it gives the error while 
> SolrAuthzBinding
> java.io.FileNotFoundException: File /user/solr/sentry/sentry-provider.ini 
> does not exist



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to