[
https://issues.apache.org/jira/browse/RANGER-5116?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Madhan Neethiraj reassigned RANGER-5116:
----------------------------------------
Assignee: Madhan Neethiraj
> Ranger plugin to support configurations to initialize kerberos identity
> -----------------------------------------------------------------------
>
> Key: RANGER-5116
> URL: https://issues.apache.org/jira/browse/RANGER-5116
> Project: Ranger
> Issue Type: Improvement
> Components: plugins
> Reporter: Madhan Neethiraj
> Assignee: Madhan Neethiraj
> Priority: Major
>
> In deployments using Kerberos to authenticate with Ranger admin server,
> Ranger plugins use the Kerberos identity returned by
> UserGroupInformation.getLoginUser() to authenticate with Ranger admin server.
> This identity is also used by HDFS audit write to authenticate with HDFS
> services.
> Ranger plugin relies on its host service (like HDFS, Hive, HBase, Knox,
> Impala) to establish the identity in UserGroupInformation. To support
> services that don't use UserGroupInformation (like Trino), the plugin should
> be enhanced to initialize Kerberos identity from its configurations.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
