[
https://issues.apache.org/jira/browse/PHOENIX-3175?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Josh Elser updated PHOENIX-3175:
--------------------------------
Attachment: PHOENIX-3175.001.patch
.001 simple removal of the {{ProxyUser.authorize(..)}} check
> Unnecessary UGI proxy user impersonation check
> ----------------------------------------------
>
> Key: PHOENIX-3175
> URL: https://issues.apache.org/jira/browse/PHOENIX-3175
> Project: Phoenix
> Issue Type: Bug
> Reporter: Josh Elser
> Assignee: Josh Elser
> Fix For: 4.9.0, 4.8.1
>
> Attachments: PHOENIX-3175.001.patch
>
>
> While looking at some issues reported by [~jpplayer], we found that some of
> the default Hadoop proxyuser configuration properties in core-site.xml
> weren't working as intended.
> [~devaraj]'s keen eye noticed that PQS was doing an unnecessary UGI ProxyUser
> impersonation check.
> We can rely on the SPNEGO authentication as the barrier to use PQS, but then
> defer to the impersonation check that HBase is already doing as to which PQS
> instances are allowed to talk to HBase (defined by core-site.xml).
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
