Istvan,

Let’s have this discussion in 
https://issues.apache.org/jira/browse/CALCITE-6590. (Even better, assign it to 
yourself!)

Julian


> On Sep 23, 2024, at 1:16 AM, Istvan Toth <st...@cloudera.com.INVALID> wrote:
> 
> The JVM option is -Djava.security.manager, as already suggested by Julian
> in CALCITE-6590.
> 
> I think that currently that's the best option.
> Looking at the code, getSubject()  only seems to be called when Kerberos
> authentication is explicitly configured,
> which typically means Hadoop-related environments, where this option will
> be needed anyway by the other libraries.
> 
> Istvan
> 
> On Mon, Sep 23, 2024 at 9:24 AM Istvan Toth <st...@cloudera.com> wrote:
> 
>> Let's keep it simple: use the same, correct, security system in all
>>> environments.
>> 
>> 
>> IUC the problem is that there is no common subset of the necessary APIs
>> between the Java 8 and Java 23 API.
>> The APIs that can be used in Java 23 were not present in Java 8 yet.
>> 
>> So the only options I see are:
>> - Not supporting Java 23
>> - Not supporting Java 8
>> - Reflection based shenanigans
>> - Multi-versioned JAR or some custom classloading shenanigan to the same
>> effect
>> - Adding and requiring a compatibility JVM option to run on Java 23.
>> 
>> Adding and requiring the compatibility JVM option is the least work, and
>> it's likely necessary anyway for any Hadoop-related use case.
>> 
>> Istvan
>> 
>> 
>> 
>> On Sat, Sep 21, 2024 at 1:56 AM Julian Hyde <jh...@apache.org> wrote:
>> 
>>>> Apache Pig hasn't released a new version for a long time.
>>> 
>>> We should consider removing the Pig adapter at some point.
>>> 
>>> Also upgrade the Spark adapter to a version that uses Hadoop 3.x
>>> rather than Hadoop 2.x.
>>> 
>> 
>> 
>> --
>> *István Tóth* | Sr. Staff Software Engineer
>> *Email*: st...@cloudera.com
>> cloudera.com <https://www.cloudera.com>
>> [image: Cloudera] <https://www.cloudera.com/>
>> [image: Cloudera on Twitter] <https://twitter.com/cloudera> [image:
>> Cloudera on Facebook] <https://www.facebook.com/cloudera> [image:
>> Cloudera on LinkedIn] <https://www.linkedin.com/company/cloudera>
>> ------------------------------
>> ------------------------------
>> 
> 
> 
> -- 
> *István Tóth* | Sr. Staff Software Engineer
> *Email*: st...@cloudera.com
> cloudera.com <https://www.cloudera.com>
> [image: Cloudera] <https://www.cloudera.com/>
> [image: Cloudera on Twitter] <https://twitter.com/cloudera> [image:
> Cloudera on Facebook] <https://www.facebook.com/cloudera> [image: Cloudera
> on LinkedIn] <https://www.linkedin.com/company/cloudera>
> ------------------------------
> ------------------------------

Reply via email to