Gregory Chanan created SENTRY-1052:
--------------------------------------
Summary: Sentry shell should use kerberos requestor and give
better error messages for kerberos failures
Key: SENTRY-1052
URL: https://issues.apache.org/jira/browse/SENTRY-1052
Project: Sentry
Issue Type: Improvement
Components: Service
Affects Versions: 1.7.0
Reporter: Gregory Chanan
Assignee: Gregory Chanan
Fix For: 1.7.0
Currently, the sentry shell uses the java "user.name" which gives some
unexpected behavior if the user is logged in via kerberos (i.e. you get error
messages about your OS user when connecting to a secure sentry service).
In addition, the error messages around this are sometimes missing. For
example, for a GSS initiate failure, which happens if there is kerberos ticket,
you get no error message returned because the top-level exception has no error
message. We should follow the exception causes until we find something
reasonable to print.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
