[ 
https://issues.apache.org/jira/browse/HBASE-9866?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13812064#comment-13812064
 ] 

Jimmy Xiang commented on HBASE-9866:
------------------------------------

I saw that. It is something like user A is allowed to do something on behalf of 
user B, now let user C to do it on behalf of user B instead, if allowed. If A 
== C and they share the same configuration, it may be fine.  Now, A could be 
different from C.  Even they are the same, the configuration could be different 
since one is the REST server (i,e, HBase client side), the other is on the 
HBase server (master/rs) side.

> Support the mode where REST server authorizes proxy users
> ---------------------------------------------------------
>
>                 Key: HBASE-9866
>                 URL: https://issues.apache.org/jira/browse/HBASE-9866
>             Project: HBase
>          Issue Type: Improvement
>            Reporter: Devaraj Das
>            Assignee: Devaraj Das
>             Fix For: 0.96.1
>
>         Attachments: 9866-1.txt
>
>
> In one use case, someone was trying to authorize with the REST server as a 
> proxy user. That mode is not supported today. 
> The curl request would be something like (assuming SPNEGO auth) - 
> {noformat}
> curl -i --negotiate -u : http://<HOST>:<PORT>/version/cluster?doas=<USER>
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.1#6144)

Reply via email to