Ruslan Dautkhanov created ZEPPELIN-1730:
-------------------------------------------
Summary: impersonate spark interpreter using --proxy-user
Key: ZEPPELIN-1730
URL: https://issues.apache.org/jira/browse/ZEPPELIN-1730
Project: Zeppelin
Issue Type: New Feature
Components: conf, Core, Interpreters, security, zeppelin-server
Affects Versions: 0.7.0
Reporter: Ruslan Dautkhanov
Cloudera's Hue is using proxy authentication quite successfully
in our organization. I.e. Hue does LDAP authentication, and then impersonates
to that specific user and all requests are made on behalf of that user
(although `hue` is actual OS user that runs Hue service). Other Hadoop services
are just configured to trust user `hue` to impersonate to other users.
It might be easier to implement Spark's multitenancy support through
spark-submit's --proxy-user parameter.
(this is applicable to kerberized and non-kerberized environments)
See comments in
https://github.com/apache/spark/pull/4405
and https://issues.apache.org/jira/browse/SPARK-5493 (resolved in Spark 1.3)
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
