Gergely Farkas has uploaded this change for review. ( http://gerrit.cloudera.org:8080/20421
Change subject: IMPALA-12403: Fix Kerberos authentication when connecting with a proxy user that does not delegate another user ...................................................................... IMPALA-12403: Fix Kerberos authentication when connecting with a proxy user that does not delegate another user This change improves LDAP checking in the Hiveserver2 API where previously LDAP filter checks were run on the user principal received in Kerberos authentication, but after the modification they are run on the short username taken from the Kerberos principal. Tested with new custom cluster tests. Change-Id: I0141cd341cda84ed40cd72f8a038c8d5a215e5e1 --- M be/src/rpc/authentication.cc M be/src/rpc/thrift-server.h M be/src/service/impala-hs2-server.cc M be/src/transport/TSasl.cpp M be/src/transport/TSasl.h M be/src/transport/TSaslTransport.cpp M be/src/transport/TSaslTransport.h M be/src/util/auth-util.cc M be/src/util/auth-util.h M fe/src/test/java/org/apache/impala/customcluster/LdapImpalaShellTest.java M fe/src/test/java/org/apache/impala/customcluster/LdapKerberosImpalaShellTest.java M fe/src/test/java/org/apache/impala/customcluster/LdapSearchBindImpalaShellTest.java 12 files changed, 130 insertions(+), 22 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/21/20421/1 -- To view, visit http://gerrit.cloudera.org:8080/20421 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: I0141cd341cda84ed40cd72f8a038c8d5a215e5e1 Gerrit-Change-Number: 20421 Gerrit-PatchSet: 1 Gerrit-Owner: Gergely Farkas <gfar...@cloudera.com>
