Hello Csaba Ringhofer, Impala Public Jenkins,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/20421
to look at the new patch set (#5).
Change subject: IMPALA-12403: Fix Kerberos authentication when connecting with
a proxy user that does not delegate another user
......................................................................
IMPALA-12403: Fix Kerberos authentication when connecting with a proxy
user that does not delegate another user
This change improves LDAP checking in the Hiveserver2 API where
previously LDAP filter checks were run on the user principal received
in Kerberos authentication, but after the modification they are run on
the short username taken from the Kerberos principal.
Tested with new custom cluster tests.
Change-Id: I0141cd341cda84ed40cd72f8a038c8d5a215e5e1
---
M be/src/rpc/authentication.cc
M be/src/rpc/thrift-server.h
M be/src/service/impala-hs2-server.cc
M be/src/transport/TSasl.cpp
M be/src/transport/TSasl.h
M be/src/transport/TSaslTransport.cpp
M be/src/transport/TSaslTransport.h
M be/src/util/auth-util.cc
M be/src/util/auth-util.h
M fe/src/test/java/org/apache/impala/customcluster/LdapImpalaShellTest.java
M
fe/src/test/java/org/apache/impala/customcluster/LdapKerberosImpalaShellTest.java
M
fe/src/test/java/org/apache/impala/customcluster/LdapSearchBindImpalaShellTest.java
12 files changed, 128 insertions(+), 22 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/21/20421/5
--
To view, visit http://gerrit.cloudera.org:8080/20421
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I0141cd341cda84ed40cd72f8a038c8d5a215e5e1
Gerrit-Change-Number: 20421
Gerrit-PatchSet: 5
Gerrit-Owner: Gergely Farkas <gfar...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <csringho...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <impala-public-jenk...@cloudera.com>
