[ 
https://issues.apache.org/jira/browse/HIVE-6837?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13959682#comment-13959682
 ] 

Vaibhav Gumashta commented on HIVE-6837:
----------------------------------------

[~taksaito] Thanks for the log and additional testing info Tak!

This is caused by threadlocals lying all over the place. There are 2 set of 
threadlocals for storing ip address, usernames (one in TSetIpAddressProcessor 
and the other in HadoopThriftAuthBridge20S.Server). I think it makes sense to 
access those through one interface, otherwise similar problems will pop up 
again. 

> HiveServer2 thrift/http mode & binary mode proxy user check fails reporting 
> IP null for client
> ----------------------------------------------------------------------------------------------
>
>                 Key: HIVE-6837
>                 URL: https://issues.apache.org/jira/browse/HIVE-6837
>             Project: Hive
>          Issue Type: Bug
>          Components: HiveServer2
>    Affects Versions: 0.13.0
>            Reporter: Dilli Arumugam
>            Assignee: Vaibhav Gumashta
>              Labels: HiveServer2
>             Fix For: 0.13.0
>
>         Attachments: hive.log
>
>
> Hive Server running thrift/http with Kerberos security.
> Kinited user knox attempting to proxy as sam.
> Beeline connection failed reporting error on hive server logs:
> Caused by: org.apache.hadoop.security.authorize.AuthorizationException: 
> Unauthorized connection for super-user: knox from IP null



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to