What is the use case for passing the proxy user to LivyClientBuilder?

On Fri, Jun 15, 2018 at 9:02 AM Marcelo Vanzin <van...@cloudera.com.invalid>
wrote:

> re: proxy user, you have to be extremely careful with that.
>
> Livy currently supports proxy user, but for the server only. It allows
> the server to impersonate anyone, so that sessions can run as the
> requesting user.
>
> If you let the user decide who the session will be run as, you'll need
> to add configuration, just as those available in HDFS, YARN, etc, to
> tell Livy which users can impersonate which other users. Otherwise
> you're basically making authentication meaningless.
>
>
> On Thu, Jun 14, 2018 at 7:36 PM, Saisai Shao <sai.sai.s...@gmail.com>
> wrote:
> > Sure, I will merge the website code, thanks!
> >
> > For proxyUser thing, I think there's no particular reason not adding it,
> > maybe we just forgot to add the proxyUser support.
> >
> > It would be better if you could create a JIRA to track this issue. If
> > you're familiar with Livy code, you can also submit a PR about it.😀
> >
> > Thanks
> > Jerry
> >
> > Takeshi Yamamuro <linguin....@gmail.com> 于2018年6月15日周五 上午7:33写道:
> >
> >> Hi, Livy dev,
> >>
> >> I opened a new pr in incubator-livy-website to add a new link in
> >> third-party-projects.md. It'd be great if you could check this;
> >> https://github.com/apache/incubator-livy-website/pull/23
> >>
> >> Btw, I have one question; currently, we cannot pass proxyUser
> >> in LivyClientBuilder. Any reason not to add code for that?
> >> I know we can handle this in an application side by adding a bit code
> like
> >>
> >>
> https://github.com/maropu/spark-sql-server/blob/master/sql/sql-server/src/main/java/org/apache/livyclient/common/CreateClientRequestWithProxyUser.java
> >> But, If Livy itself supported this, it'd be nice to me.
> >>
> >> Best,
> >> takeshi
> >>
> >> --
> >> ---
> >> Takeshi Yamamuro
> >>
>
>
>
> --
> Marcelo
>

Reply via email to